Forum Discussion
James_Thomson
Employee
EmployeeInserting client certificate information into HTTP headers
To accomplish this, from reading the manual, it looks like I want to be using this:
SSL::modssl_sessionid_headers
and then
HTTP::header insert_modssl_fields
...
It depends on the information you want to insert.
If you just want the SessionId, then you can use something like the following:
when HTTP_REQUEST {
HTTP::header insert [SSL::modssl_sessionid_headers]
}
If you are interested in more of the certificate information, then you will need to additionally use some of the X509:: commands. For example, you may want to do something like the following:
when CLIENTSSL_HANDSHAKE {
set my_cert_0 [SSL::cert 0]
set my_verify_result [SSL::verify_result]
}
when HTTP_REQUEST {
HTTP::header insert [X509::cert_fields $my_cert_0 $my_verify_result versionnum serial sigalg issuer validity subject subpubkey hash]
}
You can, of course, use a smaller subset of the X509::cert_fields.
