Forum Discussion
John_Deckers
Nimbostratus
NimbostratusIs SSL::cert populated when using APM "On-Demand Cert Auth"?
Hi!
I have configured client cert authentication using APM and its On-Demand Cert Auth action. I would like to retrieve the client certificate in an iRule event (HTTP_REQUEST) using SSL::cert comma...
Jared_ShieldsNimbostratus
NimbostratusFor anyone else that comes along this thread, I was unable to access the certificate through `SSL::cert` when the SSL profile was set to ignore the client certificate... We wanted to delay the cert request so we used the On-Demand action in an APM policy.
In our case, I was able to successfully retrieve the certificate from the APM variables, such as the following:
set cert_pem [ACCESS::session data get "session.ssl.cert.whole"]To get the thumbprint, I had to convert the PEM to DER, then B64 encode/decode, and then I was able to use the code from the OP above.