Forum Discussion

sgnormo's avatar
sgnormo
Icon for Cirrus rankCirrus
Nov 08, 2022
Solved

iRule header insert

I am using an iRule to perform a header insert of the user common name.  Now the request is that if a user clicks cancel when prompted for a certificate that the user still get to the web server spla...
application delivery
event
security
  • sgnormo's avatar
    sgnormo
    Nov 08, 2022

    that pointer gave me what i needed  thank you.

    when CLIENTSSL_CLIENTCERT {
    if {[SSL::cert 0] ne ""} {
    #log local0. "Client cert subject: [X509::subject [SSL::cert 0]]"
    set client_subject [X509::subject [SSL::cert 0]]

    }
    }
    when HTTP_REQUEST {
    if {[info exists client_subject]} {
    HTTP::header insert X-Client-Cert [X509::subject [SSL::cert 0]]
    }
    }

sgnormo's avatar
sgnormo
Icon for Cirrus rankCirrus
Nov 08, 2022

that pointer gave me what i needed  thank you.

when CLIENTSSL_CLIENTCERT {
if {[SSL::cert 0] ne ""} {
#log local0. "Client cert subject: [X509::subject [SSL::cert 0]]"
set client_subject [X509::subject [SSL::cert 0]]

}
}
when HTTP_REQUEST {
if {[info exists client_subject]} {
HTTP::header insert X-Client-Cert [X509::subject [SSL::cert 0]]
}
}