For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Adrian_Hockey_1's avatar
Adrian_Hockey_1
Icon for Nimbostratus rankNimbostratus
Jan 25, 2013

Read SHA1 HASH From Client SSL Cert

Hi,     I am using this sample to return the thumbprint of an SSL certificate. It works fine but returns the MD5 has of the cert and I would prefer to get the SHA1 hash instead. Is this pos...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 28, 2013
Yes, this should work: 


when HTTP_REQUEST {
    HTTP::header remove SSLClientCertSubject
    HTTP::header remove ClientCertThumbprint
    if { [SSL::cert count] > 0 } {
        HTTP::header insert SSLClientCertSubject [X509::subject [SSL::cert 0]]
        binary scan [sha1 [SSL::cert 0]] H* cert_hex
        HTTP::header insert ClientCertThumbprint $cert_hex
    }
}

Aaron