For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Laurent_53635's avatar
Laurent_53635
Icon for Nimbostratus rankNimbostratus
Aug 14, 2009

Irule : read PEM in header

Hello,     I have a strange irule to create in my BIG-IP LTM.   I receive in the HTTP header from the client a certificate in PEM format.   I can read it but I want to decrypt or ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 17, 2009
I haven't tried this, but using the X509:: commands might actually work. Is the HTTP header value URL and/or base64 encoded? If it is base64 and then URL encoded, could you use something like this:

 

 

set extensions [X509::extensions [URI::decode [b64decode [HTTP::header $cert_header_name]]]]

 

 

If this doesn't work, you might try opening a case with F5 Support and see if they have ideas on whether this is possible or not. If not, they could open a request for enhancement for you.

 

 

Aaron