Pull info from SSL Client Cert

Hi,

 

 

To do so you'll need the BIGIP to be the SSL termination of the the HTTPS flow.

 

 

Then you can use those commands to do the kjob :

 

 

Certificate serial number: Click here

 

Certificate issuer: Click here

 

Certificate subject: Click here

 

 

An example of certificate manipulation can be found here: Click here

 

 

to insert HTTP header it is simple: Click here

 

 

Here is an example of code to work from:

 

when HTTP_REQUEST
{ 
  set pkiSubject [X509::subject $the_cert]
  set pkiIssuer [X509::issuer $the_cert]
  HTTP::header insert CN $pkiSubject
  HTTP::header insert SSLIssuer $pkiIssuer
  HTTP::header insert SSLClientCertSN [regsub -all {:} [X509::serial_number $the_cert] -]
}