insert http-header value from SSL Certificate extentions

have you tried basic debugging yourself? if not this is how i much approach this

start with logging the X509::extensions to see if the email is available there

then check if you filter it correctly to ext_attribute, i believe that line is missing a ]

then why do you put it in a you got your email, which you can insert in your header without making it extra complex.

Hi,

now is the irule running, but i have a other problem. Our Application need the http-header everytime, not only while new connect or ssl session ID changes. Have anyone a idea?

when CLIENTSSL_CLIENTCERT {
    set search_cn_attribute "emailAddress="
    set search_cn_length [string length $search_cn_attribute]
    set cn_attribute ""
    if {[SSL::cert count] > 0} {
        set cert_subject [split [X509::subject [SSL::cert 0]] ","]
                foreach subject_attribute $cert_subject {
            if {$subject_attribute starts_with $search_cn_attribute} {
                if {$cn_attribute eq ""} {
                    append cn_attribute "[findstr $subject_attribute $search_cn_attribute $search_cn_length]"
               } else {
                                        append cn_attribute ","
                    append cn_attribute "[findstr $subject_attribute $search_cn_attribute $search_cn_length]"
               }
            }
        }
            session add ssl [SSL::sessionid] $cn_attribute
    } else {
        }
}
when HTTP_REQUEST {
    set header_cn_info "x-http-authinfo"
    if {![info exists cn_attribute]} {
        set cn_attribute ""
    }
    if {[HTTP::header exists $header_cn_info]} {
        HTTP::header remove $header_cn_info
    }
    HTTP::header insert $header_cn_info [getfield $cn_attribute "," 1]
}