OCSP Irule help needed

At the very least you're not including the AUTH::authenticate section in your code, which sends the OCSP request (and certificate data) to PAM.

 

 

AUTH::cert_credential $tmm_auth_ssl_ocsp_sid [SSL::cert 0]
AUTH::cert_issuer_credential $tmm_auth_ssl_ocsp_sid [SSL::cert issuer 0]
AUTH::authenticate $tmm_auth_ssl_ocsp_sid

 

 

I'm actually a little surprised that AUTH_RESULT is even firing, but the error indicates that the process failed. If you watch the network traffic with TCPDUMP, I'm guessing that you never see an OCSP request leave the BIG-IP.