For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SMilanic's avatar
SMilanic
Icon for Cirrus rankCirrus
Apr 18, 2016

How to read "Subject Key Identifier" value form a digital certificate

Hi,   I am looking for a way to:   1) read "Subject Key Identifier" value form a digital certificate with an iRule (something like X509::subject [SSL::cert 0])   2) insert this value into a...
application delivery
certificates
iRules
LTM
x509
SMilanic's avatar
SMilanic
Icon for Cirrus rankCirrus
Oct 06, 2016

With some help from F5, we were to solve this using APM and the following command in an iRule: "set SKI_Hex [findstr [ACCESS::session data get session.ssl.cert.x509extension] "Subject Key Identifier" 33 "X509v3"]"

 

This reads the contents of the SKI extension field from a certificate into "SKI_Hex". You can then insert it into a HTTP header as described in other posts.