Forum Discussion

Ichnafi's avatar
Ichnafi
Icon for Cirrostratus rankCirrostratus
Mar 07, 2016

Insert certificate in HTTP header fails, depending on what is logged

Hi, I have stumbled upon a strange behavior. I insert a client certificate into the HTTP header. Nothing fancy. Then I wanted to add some DEBUG Messages to see what's happening. And here my confusi...
application delivery
BIG-IP
iRules
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Mar 07, 2016

Hi Ichnafi,

the command 

[X509::whole [SSL::cert 0]]
outputs multi-line text. Multi-line value can't be insert into a header without applying some encodings (e.g. Base64, Hex, URL-Encoding) to it. So I would recommend to wrap the certificate into B64 before setting the header and then use Base64 decoding on the server side to retrive the certificate.

HTTP::header insert "X-CLIENT-CERT" [b64encode [X509::whole [SSL::cert 0]]]

Cheers, Kai