Forum Discussion
polevoym
Nimbostratus
NimbostratusLooking for an Irule to enforce ssl client authentication and then pass ssl certificate details to the backend server
Hi
I used the below irlue:
when CLIENTSSL_CLIENTCERT {
log local0. "start CLIENTSSL_CLIENTCERT"
set the_cert [SSL::cert 0]
set pkiSubject [X509::subject $the_cert]
set pkiIssuer [X509::issuer $the_ce...
tnaumovs_375792Nimbostratus
NimbostratusThis is not an answer but a comment: Just note that the solution using ‘insert’ contains a vulnerability where the cert header info can be manipulated. To correct use 'header replace'
Ex. HTTP::header replace SSLClientCertSN [lindex $session_data 2]
