Forum Discussion
Chris_Scales_10
Nimbostratus
May 23, 2006irule works on 9.1.0 but not 9.1.1
Hello,
I have an irule that is supposed to verify a client ssl cert connection. When the rule is run on our LTM running 9.1.0, it works fine; if I apply the same rule to the LTM running 9.1.1 it fails. I'm new to F5 and support has pointed me here to look for a solution.
here's the irule:
when RULE_INIT {
set ::key [AES::key 128]
log local0. "the key is: $::key"
}
when CLIENTSSL_CLIENTCERT {
session add ssl [SSL::sessionid] [X509::verify_cert_error_string [SSL::verify_result]] 180
session add ssl [SSL::sessionid] [SSL::cert 0] 180
}
when HTTP_REQUEST {
if {! [HTTP::cookie exists ClientZ]} {
set id [SSL::sessionid]
set cert [session lookup ssl $id]
if { $cert ne "" } {
log "cert is: $cert"
session delete ssl $id
} else {
log "no cert, no connection!"
reject
return
}
set z [b64encode [AES::encrypt $::key $cert]]
} else {
set cert [AES::decrypt $::key [b64decode [HTTP::cookie ClientZ]]]
}
HTTP::header insert ClientCert [b64encode $cert]
log "Inserting HTTP header ClientCert: $cert"
}
when HTTP_RESPONSE {
if { [info exists z ]} {
log "in http response Z is: $z"
HTTP::header insert "Set-Cookie ClientZ=$z"
}
}
1 Reply
- Colin_Walker_12Historic F5 AccountIt looks like it's possible that your variable "z" isn't getting re-set. Is it trying to insert the cookie twice? Is the "z" variable getting logged as double length?
Colin
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
