Modify http header to send carriage returns

Hi aonsux,

 

 

You cannot have raw carriage returns in an HTTP header value as this is the delimiter between headers. You can URL encode the cert before storing it in the session table. The web app should URL decode it before trying to parse the value.

 

 

session add ssl [SSL::sessionid] [URI::encode [X509::whole [SSL::cert 0]]] $::session_timeout

 

 

Adding the cert URI encoded to the session table takes more memory, but saves on having to do the encoding on each HTTP request using the same SSL session ID.

 

 

If there are problems with URL encoding, you might try base64 encoding the value. This assumes the app can be changed to base64 decode the header value.

 

 

Aaron