Forum Discussion

D_Miller_25373's avatar
D_Miller_25373
Icon for Nimbostratus rankNimbostratus
Nov 10, 2011

Government PIV Card Integration

As I understand the PIV card, it basically holds a PKI Client Certificate.     We need to alert the client browser to, if it has a PIV card client certificate available, send the certificate. ...
app sec
BIG-IP Access Policy Manager (APM)
security
jwham20's avatar
jwham20
Icon for Nimbostratus rankNimbostratus
Nov 30, 2011
D,

 

 

Aha! Knew there had to be more options:

 

 

Using the X509 command in the Irule, we can interrogate the client cert and push forward the data in a header

 

 

http://devcentral.f5.com/wiki/iRules.X509.ashx

 

 

And it looks like someone has also built an extensive Irule doing a binary scan:

 

http://devcentral.f5.com/wiki/iRules.Extended_X509_Certificate_Parsing.ashx

 

 

Hope this helps a bit!

 

 

Josh