Forum Discussion

Martín_Cafferat's avatar
Martín_Cafferat
Icon for Nimbostratus rankNimbostratus
5 years ago

Select clientssl profile based on uri pattern

Hello everyone, I need some help with this scenario. I've found similar questions and suggestions from devcentral memebers but I'm stuck and haven't been able to come up with a solution.   I have...
Gym's avatar
Gym
Icon for Cirrus rankCirrus
5 years ago

I think you could use a single client SSL profile that accepts either client cert. When the CLIENTSSL_CLIENTCERT event is triggered (before HTTP_REQUEST), you could use SSL::cert to record the client cert in a variable. Then, when the HTTP_REQUEST event is raised, you could check that the URI is correct for the cert you captured earlier.