Forum Discussion
ClientSSL_clientCert variables not avail in HTTP_Request
Hi All,
I am working on an iRule that inserts the client certificate issuer and subject fields as a header for a terminated application. The following rule passes syntax checking, thou I see the log...
AaronJB
SIRT
SIRTI don't think setting a global variable will work in this case, as each new client connection will update the global variable, which will result in using the last connection's cert info for each HTTP request.
Indeed - I think it's best to serialise the cert data into the session table with a "session add " (I think that's the right parameters from memory), and then look the data up in the HTTP_REQUEST event.
I think the CLIENTSSL_CLIENTCERT event will only be triggered once per initial SSL negotiation (so SSL resumes won't fire it), so you only populate the session table once per client.
