For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Muhammad_Irfan1's avatar
Muhammad_Irfan1
Icon for Cirrus rankCirrus
Dec 11, 2014

Client authentication is set to require but not getting any log from this iRule

    when CLIENTSSL_CLIENTCERT { Debug flag set debug 1 Check if client presented a cert after it was requested/required if {[SSL::cert count] > 0}{ Client presented at least one cert. ...
devops
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Dec 12, 2014

What I see is that you are checking $debug for greater than 1 (if {$debug > 1}) and then in your else statement, you're checking for $debug to be greater than 1 again, so since your $debug is set to 1, it'll never log anything.

I'd say either set the debug variable to 2 or greater, or else change the code to check >= instead of just >.