Forward client certificate info to applications

have you seen this one?

 

 

Request Client Certificate And Pass To Application by alankila

 

http://devcentral.f5.com/wiki/iRules.RequestClientCertificateAndPassToApplication.ashx

 

 

can your developer read client certificate info from the header?

Thanks for the reply.

 

 

Yes, I've looked at passing the certificate info in headers.

 

Unfortunately the company making the application won't support reading the certificate from anything other than what they call ".NET built in objects".

 

To put the question another way; If the application can't read cert info from headers, is there any way to get the info into the application? Maybe with a third party module/component?

 

May not be F5 products, but perhaps someone know of any other products for this?

 

 

I have been searching around for a solutions for a couple of days now, but not had much luck.

 

It's possible there is a serverside plugin you could use for this. But I'm not aware of one.

 

 

In v11, there is a new feature called Proxy SSL which you can use for this type of scenario where you need to pass the original client cert onto the pool. Basically, you import the server cert/key(s) to LTM. LTM will allow the client and selected pool member to negotiate an SSL handshake directly. LTM watches to see what server cert the pool member uses. It then intercepts subsequent communication and decrypts the SSL allowing you to inspect/modify with the unencrypted content. This includes adding an HTTP profile to the virtual server. I couldn't find much public documentation on this, but you could open a case with F5 Support to request more details and a documentation update.

 

 

Aaron

Thanks for the info!

 

 

I'll look into Proxy SSL

 

 

/Andreas