For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

LyonsG_85618's avatar
LyonsG_85618
Icon for Cirrostratus rankCirrostratus
Nov 16, 2012

Passing decoded certficates in HTTP header

Hi folks.     I have been requested to setup BIG-IP to request certificate authentication and then insert the WHOLE UNENCODED certificate into the HTTP header and pass it to a differnt virtua...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 16, 2012
I would like to avoid creating another IRULE for the other VIP as this is used for LOTS of othr applications and I am not sure the impact that doing this would have on the other applications.

 

 

If you remove any pre-existing instances of a custom header name and then insert the base64 encoded copy of the cert in that header name, it would be fairly cheap resource-wise to look for that header on a second VS. You could then only base64 decode the header value if it's present.

 

 

Aaron