wuhu99
Oct 18, 2019Nimbostratus
iRule - set SSL Cert mode based on client cert value
Hi there
Wondering how i could execute the below using an iRule?
I've run into the ssl bug https://support.f5.com/csp/article/K76313281 where the client selects a signature algorithm not supported by the F5.
As a workaround I am thinking of writing an iRule to set the SSL cert mode to Ignore based on the Subject value of the client certificate.
However to do this I believe I would first need to request the client certificate (which is my default SSL profile setting) and then extract the Subject value and check if it contains the desired string.
If it does then I want to have the SSL cert mode set to Ignore.
Thanks!