Forum Discussion
RiverFish
Altostratus
AltostratusGenerate SHA1 thumbprint of incoming SSL cert
Greetings! I have a request from a developer (below). I was hoping one of you could please help me come up with a solution?
---------------
The F5 needs to generate an SHA1 thumbprint of th...
RiverFishAltostratus
AltostratusSo this:
binary scan [sha1 [SSL::cert 0]] H* cert_hex
HTTP::header insert ClientCert-Thumbprint $cert_hex
is the same as this:
when CLIENTSSL_CLIENTCERT {
set client_cert [SSL::cert 0]
log local0 "Cert Thumbprint - [X509::subject $client_Hash]"
set cert_hash [X509::hash $client_cert]
}
when HTTP_REQUEST {
if { [info exist cert_hash] } {
HTTP::header insert ClientCertThumbprint $cert_hash
return
}
}
?
