Forum Discussion

Anthony_Gerace_'s avatar
Anthony_Gerace_
Historic F5 Account
Oct 12, 2006

ClientSSL_clientCert variables not avail in HTTP_Request

Hi All, I am working on an iRule that inserts the client certificate issuer and subject fields as a header for a terminated application. The following rule passes syntax checking, thou I see the log...
application delivery
dev
devops
iRules
Colin_Walker_12's avatar
Colin_Walker_12
Historic F5 Account
Oct 12, 2006
Have you tried setting this as a global variable?


when CLIENTSSL_CLIENTCERT {
  set ::certData  "[X509::issuer [SSL::cert 0]], [X509::subject [SSL::cert 0]]"
  log local0.  "CertData is $::certData"
}
  when HTTP_REQUEST {
    log local0. "CertData is $::certData"
    if { [string length $::certData] > 2 } {
      HTTP::header insert x-fvb2bs-client-cert $::certData
      log local0. "Client [IP::remote_addr] had certificate $::certData"
    }
    pool fvb2bs-443-p-mko
}

Colin