Forum Discussion

Mathew_58739's avatar
Mathew_58739
Icon for Nimbostratus rankNimbostratus
Oct 30, 2008

iRule to extract and compare EKU field in SSL cert

I have an application need to extract the OID value out of the EKU in clear text. Is there a TCL value for the X509 EKU parameter in an SSL certificate? Similar to the X509::subject value extraction.
application delivery
dev
devops
iRules
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Nov 05, 2008
    There isn't a specific command for this yet, that I'm aware of. This is something we can certainly look into, but unfortunately I'm not sure there's a way to get at the info you're looking for via iRules.

     

     

    Colin

     

  • Mathew_58739's avatar
    Mathew_58739
    Icon for Nimbostratus rankNimbostratus
    Nov 06, 2008
    Is it possible to extract the entire certificate in clear text? The only option that I see currently is in PEM format.