For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ichnafi's avatar
Ichnafi
Icon for Cirrostratus rankCirrostratus
Mar 07, 2016

Insert certificate in HTTP header fails, depending on what is logged

Hi, I have stumbled upon a strange behavior. I insert a client certificate into the HTTP header. Nothing fancy. Then I wanted to add some DEBUG Messages to see what's happening. And here my confusi...
application delivery
BIG-IP
iRules
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Mar 07, 2016

Hi Ichnafi,

the command 

[X509::whole [SSL::cert 0]]
outputs multi-line text. Multi-line value can't be insert into a header without applying some encodings (e.g. Base64, Hex, URL-Encoding) to it. So I would recommend to wrap the certificate into B64 before setting the header and then use Base64 decoding on the server side to retrive the certificate.

HTTP::header insert "X-CLIENT-CERT" [b64encode [X509::whole [SSL::cert 0]]]

Cheers, Kai