JCMATTOS_41723
Nimbostratus
Nov 01, 2011CN list for x509::subject?
We have a current irule CN list that works great, and would like to somehow lowercase the X509::subject characters to eliminate case sensitive subjects? Not sure if thats possible but I tried something like this and it did not work. Any ideas?
when CLIENTSSL_CLIENTCERT {
Check if client provided a cert
if {[SSL::cert 0] eq ""}{
log "Client Certificate Missing"
reject
} else {
set subject_dn [X509::subject [SSL::cert 0]]
log "Client Certificate Received: $subject_dn"
if {([matchclass [string tolower [$subject_dn]] contains $::cn_list]) } {
Accept the client cert
log "Client Certificate Accepted: $subject_dn [SSL::cert count]"
} else {
log "Client Certificate Mismatch: $subject_dn [SSL::cert count]"
reject
}
}
}