Forum Discussion
SMilanic
Cirrus
CirrusHow to read "Subject Key Identifier" value form a digital certificate
Hi,
I am looking for a way to:
1) read "Subject Key Identifier" value form a digital certificate with an iRule (something like X509::subject [SSL::cert 0])
2) insert this value into a...
SMilanicCirrus
CirrusWith some help from F5, we were to solve this using APM and the following command in an iRule: "set SKI_Hex [findstr [ACCESS::session data get session.ssl.cert.x509extension] "Subject Key Identifier" 33 "X509v3"]"
This reads the contents of the SKI extension field from a certificate into "SKI_Hex". You can then insert it into a HTTP header as described in other posts.