Forum Discussion
Ron_Kim_110696
Nimbostratus
NimbostratusiRule example to extract specific X509 information: SOL5171
I can't get this iRule to work.
The variable $sn in the HTTP_REQUEST section does not have a value.
It is working in the CLIENTSSL_CLIENTCERT section.
Variables do not seem t...
Ron_Kim_110696Nimbostratus
NimbostratusThank you.
We tried this.
when CLIENTSSL_CLIENTCERT {
set cert [SSL::cert 0]
set sn [X509::serial_number $cert]
log local0. "cert is $cert" ; This works
log local0. "sn is $sn" ; This works
}
when HTTP_REQUEST {
if { [info exists $sn] } {
HTTP::header insert Serial $sn
log local0. "sn is $sn" ; This DOES NOT work. Blank Value
}
}
Any variable that is set in the CLIENTSSL_CLIENTCERT section, does not pass to the HTTP_REQUEST section.
We tried this with multiple different X509 variables.
We are running version 9.1.2, could this be a bug?