Inserting client certificate information into HTTP headers

when CLIENTSSL_HANDSHAKE {

 

set my_cert_0 [SSL::cert 0]

 

set my_verify_result [SSL::verify_result]

 

}

 

 

when HTTP_REQUEST {

 

HTTP::header insert [X509::cert_fields $my_cert_0 $my_verify_result issuer]

 

}

 

 

Using this rule, it seems to work except this is the only http header I get inserted:

 

 

HTTP_SSLCLIENTCERTSTATUS:error number 1

 

 

Looking at mod_ssl verify results error codes, I can't seem to see what a 1 would mean. 0 seems to be a pass:

 

http://www.hmug.org/man/1/verify.html

 

 

I'm using BIG-IP too already verify the client certificate against a CRL And that is working fine.