Generate SHA1 thumbprint of incoming SSL cert

Just wanted to post an update. Hoolio's iRule made it through test, QA, and is now in production. It takes the SHA1 thumbprint of the incoming SSL cert, converts it to hex, and inserts it into the header. It also takes the cert subject of the incoming SSL cert and inserts it into the header. Lastly, it scrubs any pre-existing headers before inserting the new ones as an extra measure of security. Thanks again Hoolio, and thanks to everyone else who pitched in. Here is the iRule again in final form:

 

 

when HTTP_REQUEST {

 

if { [SSL::cert count] > 0 } {

 

HTTP::header remove SSLClientCertSubject

 

HTTP::header insert SSLClientCertSubject [X509::subject [SSL::cert 0]]

 

 

binary scan [sha1 [SSL::cert 0]] H* cert_hex

 

HTTP::header remove ClientCertThumbprint

 

HTTP::header insert ClientCertThumbprint $cert_hex

 

}

 

}