Client Certificates at the Backend?

Here is the irule that I have working to get me the certificate information. It does pass it to Oracle in PEM format.

 

I will post my Java solution to dealing with this next

 

 

when CLIENTSSL_CLIENTCERT {

 

if { [SSL::verify_result] } {

 

log LOCAL0.warn "Client cert didn't verify, openssl code=[SSL::verify_result]"

 

reject

 

}

 

}

 

 

when HTTP_REQUEST {

 

if { [HTTP::header exists SSL_Client_Cert] } {

 

log LOCAL0.warn "removed inbound cert header - possible attack"

 

reject

 

}

 

 

if { [SSL::cert count] != 0 } {

 

set subject { }

 

lappend subject [X509::subject [SSL::cert 0]]

 

HTTP::header replace SSL_Client_Cert [X509::whole [SSL::cert 0]]

 

HTTP::header replace SSL_Client_Cert_Chain_1 [X509::whole [SSL::cert 1]]

 

}

 

}