Forum Discussion
Drew666
Nimbostratus
Oct 08, 2019iRule CMD usage clarification - SSL::SNI
Hi, I'm looking for an iRule command to extract the Server Name attribute (SNI) from an incoming SSL/TLS Client Hello packet. According to the F5 description: [https://clouddocs.f5.com/a...
Yoann_Le_Corvi1
Cumulonimbus
Oct 10, 2019Here it goes...
when CLIENTSSL_HANDSHAKE {
log local0.info "CLIENTSSL_HANDSHAKE"
set ext_exists [SSL::extensions exists -type 0]
log local0.info "SSL extension type 0 exists: $ext_exists"
if {$ext_exists} {
set scan [binary scan [SSL::extensions -type 0] S1S1A4A* ext_type ext_len disc ext]
#set sni_hostname [binary format H* $ext]
log local0. "SSL server_name $ext"
}
}- Drew666Oct 20, 2019
Nimbostratus
Hi Yoann
Firstly my apologies for the late reply (have been away)
I'll test it hopefully this week.
Thanking you
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects