Insert Common Name Value to HTTP Header

Hi Karthik,

inserting this information requires a client-ssl profile (providing a server certificate to the client and requesting a client certificate by the server.

The header insert also requires a http-profile.

You can use an iRule to insert the header. Please adjust the header name according to your needs.

when CLIENTSSL_CLIENTCERT {
    if {[SSL::cert 0] ne ""} {
         set ssl_clientcert_subject [X509::subject [SSL::cert 0]]
        set ssl_clientcert_subject_cn [findstr [X509::subject [SSL::cert 0]] "CN=" 3 ","]
         set ssl_clientcert_issuer [X509::issuer [SSL::cert 0]]
         set ssl_clientcert_issuer_cn [findstr [X509::issuer [SSL::cert 0]] "CN=" 3 ","]
    }
}
when HTTP_REQUEST {
    if {[info exists ssl_clientcert_subject_cn]} {
        HTTP::header insert ClientCertSubjectCn "$ssl_clientcert_subject_cn"
    }
}

Please note other interesting variables in this context:

HTTP::header replace "BIGIP_SSL_CIPHER_NAME" "[SSL::cipher name]"
HTTP::header replace "BIGIP_SSL_CIPHER_BITS" "[SSL::cipher bits]"
HTTP::header replace "BIGIP_SSL_PROTOCOL" "[SSL::cipher version]"
HTTP::header replace "BIGIP_SSL_SESSIONID" "[SSL::sessionid]"

I´m currently not sure about using white spaces in a header value (as it might be the case if the CN contains whitespace characters) and if it would be required to encode them.

Thanks, Stephan