F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

ryan_defeo_3162's avatar
ryan_defeo_3162
Icon for Nimbostratus rankNimbostratus
Jul 06, 2017

Enhanced key usage and machine cert auth

Is it possible to leverage machine cert authentication and have it read the enhanced key usage field within a certificate to determine resource allocation? I am sure there is a way to write an irule for this functionality, I just don't want it to get messy. Thanks!

 

application delivery
BIG-IP Access Policy Manager (APM)
LTM

1 Reply

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Aug 17, 2017

    Hi,

     

    You can retrieve the full certificate in a session variable : session.check_machinecert..cert.cert

     

     

    You can find more info here.

     

    Then you can parse the certificate using an irule or maybe with pure TCL in the VPE

     

    Yann