For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

LyonsG_85618's avatar
LyonsG_85618
Icon for Cirrostratus rankCirrostratus
Nov 16, 2012

Passing decoded certficates in HTTP header

Hi folks.     I have been requested to setup BIG-IP to request certificate authentication and then insert the WHOLE UNENCODED certificate into the HTTP header and pass it to a differnt virtua...
application delivery
dev
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 16, 2012
Well, if I'm understanding you, you want to send the binary certificate between VIPs? A certificate can be either DER or PEM encoded. [SSL::cert 0] produces the DER, and [X509::whole [SSL::cert 0]] produces the PEM. I would not recommend sending the DER version in an HTTP header, and the PEM version is laced with line breaks.

 

 

In any case, you'd need something on the other VIP to receive the HTTP header and do something with it. How are you using the value in the application behind the second VIP?