Forum Discussion

Dan_Henderson_1's avatar
Dan_Henderson_1
Icon for Nimbostratus rankNimbostratus
Feb 25, 2005

secure cookies with cookie persistence?

Hi

 

 

Is there a way to enable secure cookies for cookie persistence on the bigip v904?

 

 

Thanks

 

Dan

2 Replies

  • drteeth_127330's avatar
    drteeth_127330
    Historic F5 Account
    No, there isn't. But cookie persistence can be re-implemented fairly easily with the universal persistence rule commands. You could then insert a cookie with whatever attributes you want, encrypt it, etc. Why don't you take a stab at writing the rule and I'll help out if you have problems?
  • bl0ndie_127134's avatar
    bl0ndie_127134
    Historic F5 Account
    We have also provided a way to do an inplace AES encryption/decryption of the cookies. Here is an example.

    when HTTP_REQUEST {  
          if {[HTTP::cookie exists "cookieName"]} {  
            HTTP::cookie decrpt "cookieName" "passphrase"  
          }  
      }  
        
      when HTTP_RESPONSE {  
          if {[HTTP::cookie exists "cookieName"]} {  
             HTTP::cookie encrypt "cookieName" "passphrase"  
          }  
      }

    Where the "passphrase" is a password based key. The encryption will effectively encrypt and base64 encode the cookie value for you.