Forum Discussion
jagath_311361
Nimbostratus
NimbostratusHMAC Authentication using F5
We are trying to use the below iRule, as mentioned in the link https://devcentral.f5.com/codeshare/akamai-g20-header-authentication, which apparently is not working as the CRYTO::sign returns a hash ...
Like you mentioned, the
CRYPTO:signwhen HTTP_REQUEST {
if {[HTTP::header exists "X-Akamai-G2O-Auth-Data"] && [HTTP::header exists "X-Akamai-G2O-Auth-Sign"]} {
set shared secret here
set secret_key "pass"
set data "[HTTP::header value "X-Akamai-G2O-Auth-Data"][HTTP::path]"
set signature "[HTTP::header value "X-Akamai-G2O-Auth-Sign"]"
set signed_data_binary [CRYPTO::sign -alg hmac-sha256 -key $secret_key $data]
binary scan $signed_data_binary H* signed_data_hex
if { $signed_data_hex eq $signature } {
log local0. "Signatures match"
}
}
}
