For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Steve_Brockman_'s avatar
Steve_Brockman_
Icon for Nimbostratus rankNimbostratus
Oct 19, 2005

Session Lookup not working?

Hi, Can anyone tell me why a client cert that I am adding for a session in CLIENTSSL_CLIENTCERT is not able to be found in HTTP_REQUEST ?? CLIENTSSL_CLIENTCERT session add ssl [SSL::sessioni...
application delivery
dev
devops
iRules
Steve_Brockman_'s avatar
Steve_Brockman_
Icon for Nimbostratus rankNimbostratus
Oct 31, 2005
Hey I got some more time to research this some more... it seems that the cert is not being retrieved within the CLIENTSSL_CLIENTCERT function itself:


when CLIENTSSL_CLIENTCERT {
  set ssl_cert [SSL::cert 0]
  set id [SSL::sessionid]
  session add ssl $id $ssl_cert 90
  set cert11 [session lookup ssl $id]
  if { $cert11 equals "" } {
    log "AAAGH - no cert in CLIENTSSL-CLIENTCERT!!!"
  }
}

I am terminating SSL at the BIG-IP, and performing non-SSL to the back-end. If I monitor the persistence records (under Statistics) it appears to be making an entry in the SSL table, just no value being inserted.

Any ideas on what could be causing this ?

Thanks,

Steve