Forum Discussion
gpoverland
Nimbostratus
NimbostratusF5 iRule Example integrating HMAC
I currently utilize a static key value to create a custom encrypted cookie to validate user session authenticity via cookie values. I would like to move over to using an HMAC solution, but having iss...
Kai_Wilke
MVP
MVPHi Dtwesten,
I was able to sniff through the HTML source of your post...
General notes
The condition [HTTP::uri] starts_with "/" is always true. So you can savely remove every instance of this condition.
You parse the request for [HTTP::cookie exists "hmac_01"] but you set [HTTP::cookie insert "hmac_74"]
You should unset $hmac_output right after [HTTP::cookie insert name "hmac_74" value $hmac_output path "/"]
You should add HttpOnly and Secure flags to the HMAC cookie if security is a concern.
Regarding your error
The line...
set hmac_input $hmac_output
... should be changed to...
set hmac_input [HTTP::cookie value "hmac_74"]
The rest looks good so far...
Cheers, Kai