Forum Discussion

Kyle_Twenty_250's avatar
Kyle_Twenty_250
Icon for Nimbostratus rankNimbostratus
Feb 21, 2016

Insert multiple Public-Key-Pins with iRule

I'm trying to insert multiple public-key-pins using an iRule in LTM 12. Currently, I can get it to work and pass the Qualys test when using a single key with the following code:   HTTP::header ins...
iRules
LTM
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Feb 21, 2016

Hi Kyle,

you have to either 

\
or 
{}
escape the double-quote characters to become a part of the 
HTTP::header
parameter strings...

HTTP::header insert "Public-Key-Pins" "pin-sha256=\"hash 1 goes here\"; pin-sha256=\"hash 2 goes here\"; pin-sha256=\"hash 3 goes here\""

... or ... 

HTTP::header insert "Public-Key-Pins" {pin-sha256="hash 1 goes here"; pin-sha256="hash 2 goes here"; pin-sha256="hash 3 goes here"}

Note: The first example allows you to substitute certain 

[commands]
or 
$variables
to the string. The later example didn't allow any kind of substitution.

Cheers, Kai