Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Mar 08, 2011

iRule problem after upgrade to 10.2

Hello I've been using a lightly modified version of this irule for more than a year withount any issue:

 

http://devcentral.f5.com/wiki/default.aspx/iRules/RequestClientCertificateAndPassToApplication.html

 

We have LTM -> Apache -> Application Server

 

We use the iRule to authenticate through digital certificate.

 

But it isn't working anymore since we upgrade fo r to 10.2 last weekend.

 

The Application server is not receiving the certificate, although it's being iserted in the http header.

 

We have checked the Apache logs and these are the differences:

 

Before Upgrade:

 

 

1298935989 85.54.175.24 - [01/Mar/2011:00:33:09 +0100] 0 "POST /extern/jsp/cert.jspHTTP/1.1" 200 6561 "https://ourserver/service" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; FunWebProducts; GTB6.6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET4.0C)" POST /extern/jsp/cert.jsp - "HTTP/1.1" In:- Out:-:-pct.

 

 

 

 

After

 

 

access_log443.1299617400:1299617687 81.32.114.58 - [08/Mar/2011:21:54:47 +0100] 0 "POST /extern/jsp/cert.jsp HTTP/1.1" 403 2027 "https://ourserver/service" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0; .NET4.0C; MS-RTC LM 8)" GET /extern/jsp/cert.jsp - "HTTP/1.1" In:- Out:-:-pct.

 

 

 

 

%...m The request method GET /extern/jsp/cert.jsp

 

I'm not sure, but it looks as if it's using POST method instead of get although the referer indicates "POST"

 

Does it make sense to anyone?

 

Can you help me?

 

No RepliesBe the first to reply