Forum Discussion

rcurr9999tcf_35's avatar
rcurr9999tcf_35
Icon for Nimbostratus rankNimbostratus
Jul 26, 2018

iRule to validate that the client certificate is allowed via CN

Hi All, I am trying to write an iRule to check the client certificate and if the cert does not contain the two CN entries below client certificate authentication is rejected and logged. Is my synt...
LTM
security
rob_carr's avatar
rob_carr
Icon for Cirrostratus rankCirrostratus
Jul 26, 2018
when CLIENTSSL_CLIENTCERT {
  if {[SSL::cert count] > 0} {
    set cert [SSL::cert 0]
    set subject [string tolower [X509::subject $cert]]
    if { not ($subject contains "cn=integration-prod_sfdc-client") } {
      reject
      log local0. "cert CN not valid"
    }
  }
}