Forum Discussion
Bernard_9303
Nimbostratus
NimbostratusSharePoint Server with SSL Offloading Configuration Issue
Hi,
I am trying to configure Big-IP for SharePoint SSL offloading. Behind the Big-IP are 2 sharepoint front end servers.
I created the virtual server and pool as per the ...
Ryan_Segura_110Nimbostratus
NimbostratusI modified the example to show some more client SSL variables, does this sound right?
when CLIENTSSL_CLIENTCERT {
set ssl_cert [SSL::cert 0]
set ssl_errstr [X509::verify_cert_error_string [SSL::verify_result]]
set ssl_stuff [list $ssl_cert $ssl_errstr]
session add ssl [SSL::sessionid] $ssl_stuff 180
}
when HTTP_REQUEST {
set ssl_stuff2 [session lookup ssl [SSL::sessionid]]
set ssl_cert2 [lindex $ssl_stuff2 0]
set ssl_errstr2 [lindex $ssl_stuff2 1]
if { $ssl_errstr2 eq "ok" } {
HTTP::header insert SSLClientCertStatus $ssl_errstr2
HTTP::header insert SSLClientCertSN [X509::serial_number $ssl_cert2]
HTTP::header insert SSLClientCertValidFrom [X509::not_valid_before $ssl_cert2]
HTTP::header insert SSLClientCertValidUtil [X509::not_valid_after $ssl_cert2]
HTTP::header insert SSLClientCertSubject [X509::subject $ssl_cert2]
HTTP::header insert SSLClientCertIssuer [X509::issuer $ssl_cert2]
} else {
HTTP::redirect http://192.168.0.64/error.html
}
}
MiLK_MaNWhy not just use split and then extract the field via lindex?
% set testuri "/mapper/time_map/datatype/comtype/37.777125/-122.419644/13/1309/3164.json?v=1°ree_buffer=0.002&callback=jQuery1720814429080274308_1339544764657&_=1339544771741"
/mapper/time_map/datatype/comtype/37.777125/-122.419644/13/1309/3164.json?v=1°ree_buffer=0.002&callback=jQuery1720814429080274308_1339544764657&_=1339544771741
% set split [split $testuri /]
{} mapper time_map datatype comtype 37.777125 -122.419644 13 1309 3164.json?v=1°ree_buffer=0.002&callback=jQuery1720814429080274308_1339544764657&_=1339544771741
% puts "[lrange $split 4 6]"
comtype 37.777125 -122.419644
% puts "[lindex $split 4]"
comtype
The scan statement will still work, but it seem it has troubles with the / being the first character, so this will work:
% scan $testuri {/%*[^/]/%*[^/]/%*[^/]/%[^/]/%[^/]/%[^/]} one two three
3
% puts $one
comtype
% puts $two
37.777125
% puts $three
-122.419644
hoolioCirrostratus
Nice work MiLK_MaN. I think the single scan command should be more efficient than split with lindex, etc.
Aaron- supreme_86715Thank MiLK_MaN this works. Btw what editor/shell are you using the check test the irules?
- MiLK_MaNJust tclsh in a Mint Debian virtual machine on my home ESX server :)
![\"F5](\"https://www.f5.com/content/dam/f5/f5-logo.svg\"){kind=logo}
