For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 04, 2014

Given a straight LTM iRules configuration, the following iRule should be able to extract the email address from the SAN rfc822Name property:

when HTTP_REQUEST {
    if { [SSL::cert count] > 0 } {
        set email [findstr [X509::extensions [SSL::cert 0]] "email: " 7 " "]
    }
}