Forum Discussion
Tarmo_Oja_95406
Nimbostratus
Nimbostratussession {add|delete} ssl question
I found this code from Code Share.
rule c_cert_session {
when RULE_INIT {
set ::key [AES::key 128]
log local0. "the key is: $::key"
}
when CLIENTSSL_CLIENTCERT { ...
Answer:
a) The rule was constructed to search the session table first and only if an entry wasn't found, look for the cookie. Because of this, the session entry needs to be deleted when switching to the cookie. This could easily be reworked to check for the cookie first, though you might risk getting an outdated cookie.
b)
session add ssl []
session lookup ssl
session delete ssl
c) I have no idea. Maybe someone who is more familiar with how a client browser works with the smart cards can shed some light on this question.
