For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Laurent_53635's avatar
Laurent_53635
Icon for Nimbostratus rankNimbostratus
Aug 14, 2009

Irule : read PEM in header

Hello,     I have a strange irule to create in my BIG-IP LTM.   I receive in the HTTP header from the client a certificate in PEM format.   I can read it but I want to decrypt or ...
application delivery
dev
devops
iRules
Laurent_53635's avatar
Laurent_53635
Icon for Nimbostratus rankNimbostratus
Aug 17, 2009
Hello,

 

 

Many thanks Aarron.

 

 

Now It works. I was also trying with X509::extensions [[b64decode but it does not support the "BEGIN CERTIFICATE ... END ..." statement in PEM.

 

 

Here the result

 

 

 

set userCERT [b64decode [findstr [HTTP::header value USERCERTIFICATE] "-----BEGIN CERTIFICATE-----" 28 "-----END CERTIFICATE-----"]]

 

set UPN [findstr [X509::extensions $userCERT] "UPN<" 4 ">"]

 

set CRL [findstr [X509::extensions $userCERT] "X509v3 CRL Distribution Points" 32 "X509"]

 

 

 

 

Have nice evening and thanks again

 

 

Laurent