For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eric_haupt1's avatar
eric_haupt1
Icon for Nimbostratus rankNimbostratus
Sep 06, 2017

Client Certificate - Regex to parse numbers from cert subject

I've been using an irule from Devcentral for quite some time to parse the othername:UPN x509 field from our client certificates for APM use. However, our clients are provided two certs and one of th...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 07, 2017

Hi,

you can do it without an irule event (what is not optimal usage or APM) but with the following expression in 

variable assign

set extension [mcget {session.ssl.cert.x509extension}];
if {[set tempupn [string range $extension [expr {[string first "othername:UPN<" $extension] +14}] [expr {[string last ">" $extension] -1}] ]] != ""} {
    return $tempupn;
} elseif {[regexp {\d{10,16}} [mcget {session.ssl.cert.subject}] tempiv]} {
    return "$tempiv@company";
}