Forum Discussion
AwesomeNetwork1
Nimbostratus
NimbostratusHow do I modify header fields on additional sockets?
I added an iRule to capture the x509 CN name form a CAC and insert it in the header (see below)-
when CLIENTSSL_CLIENTCERT {
set debug 0
if {[SSL::cert 0] eq ""}{
reject
} el...
DevBabu
Cirrus
CirrusCLIENTSSL_CLIENTCERT is triggered when BIG-IP receives certificate message from the client. I think it happens at the time of new SSL handshake process.
You can use a session table to store the client cert / subject field using client IP address as key. Later in the HTTP request when you see the client IP retrieve the value from the table and insert it in the header.
Check this out if it helps https://devcentral.f5.com/articles/irules-101-12-the-session-command
