Forum Discussion
johnko05_45751
Nimbostratus
NimbostratusiRule v9 to v10 conversion
Hello, I used the iRule below just fine on version 9.4.8. We recently upgraded to 10.2. Now I get the following error in /var/log/ltm whenever this iRule is invoked:
Sep 7 23:17:41 local/...
johnko05_45751Nimbostratus
NimbostratusI was able to fix the iRule. I changed this:
when CLIENTSSL_CLIENTCERT {
clientside {
set cert "SSL::cert"
session add ssl [SSL::sessionid] $cert 600
set cname "SSL::cipher name"
set cbits "SSL::cipher bits"
set cver "SSL::cipher version"
set cn [X509::subject [eval $cert 0]]
set cSSLSubject [findstr $cn "CN=" 3 ","]
set cSSLClientCert [b64encode [eval $cert 0]]
}
}
TO THIS:
when CLIENTSSL_CLIENTCERT {
clientside {
set cert "SSL::cert"
set cname "SSL::cipher name"
set cbits "SSL::cipher bits"
set cver "SSL::cipher version"
set cn [X509::subject [eval $cert 0]]
set cSSLSubject [findstr $cn "CN=" 3 ","]
set cSSLClientCert [b64encode [eval $cert 0]]
set key [concat [SSL::sessionid] [SSL::cert 0]]
session add ssl $key 600
}
}
