Forum Discussion
Andrew_Jones
Nimbostratus
NimbostratusIrule explanation
Hi can some explain what the following Irule is looking to do when CLIENTSSL_CLIENTCERT { if { [SSL::cert 0] ne "" }{ if { not [class match -- [X509::subject [SSL::cert 0]] contains [v...
Lidev
Nacreous
NacreousHi,
in brief, this irules checks the CN of the X509 certificate in order to verify if it's present in the DataGroup [virtual name]_cert_dg , if not compliant it rejects the call.
More details here :
https://clouddocs.f5.com/api/irules/X509__subject.html
https://clouddocs.f5.com/api/irules/SSL__cert.html
Regards
