Forum Discussion
Nick_Matthews
Cirrus
Feb 20, 2014Check for Device UID/Serial number for access to website
Hi, I am hoping someone might be able to help with this question.
Currently I have a mobile device with a standard Android app (Not written by us) available for anyone to download that if used w...
Nick_Matthews
Cirrus
Feb 20, 2014So I have got it roughly working if I use a browser, but the app still doesnt work, it reports the below error:
TCL error: /Common/TMCertCheck - while executing "X509::subject $cert"
The rule I am using is:
get certificate data
when CLIENTSSL_CLIENTCERT priority 1 {
set cert [SSL::cert 0]
set subject [X509::subject $cert]
set issuer [X509::issuer $cert]
set version [X509::version $cert]
set clientIP [IP::client_addr]
check Certificate common name to see if it contains the FQDN for Virtual server
if { $subject contains "CN=MyEmailAddress" } {
uncomment the line below to validate that the iRule is accepting a valid certificate
log local0. "cert CN valid"
} else {
if the certificate is not valid log client IP and reject connection
log $clientIP
log local0. "cert CN not valid"
reject
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects