iRule SSL handshake doesn't run in 10.2.0

You're attempting to add the client's certificate to the session table every time an SSL handshake is completed and the client's session ID isn't already in the SSL session cache. This will fail with a runtime TCL error if the client tries to resume an existing session, after the TMM session expires, but doesn't include the client cert.

 

 

If you want to insert the details for a cert in the HTTP headers, you can use an iRule like this instead:

 

http://devcentral.f5.com/wiki/iRules.InsertCertInServerHeaders.ashx

 

 

This iRule accounts for the change in behavior that Nitass described for SSL::sessionid.

 

 

Aaron