Forum Discussion
Goran_Blomquis1
Nimbostratus
NimbostratusSet ssl to require and pass cert when uri /manual
Hi devcentral
I try to write a I-rule that change ignore to require in SSLclient profile. I think Iḿ on the right track, but backend seems to be very slow and ask for cert all the time....
Goran_Blomquis1Nimbostratus
NimbostratusHi,
The result was that certificate info never reached the backend server (if I rember it right). Problem are solved and I use an I-rule looking something like this.
when CLIENTSSL_CLIENTCERT {
HTTP::release
if { [SSL::cert count] < 1 } {
reject
}
}
when HTTP_REQUEST {
if { [HTTP::uri] starts_with "/manual" } {
if { [SSL::cert count] <= 0 } {
HTTP::collect
SSL::authenticate always
SSL::authenticate depth 9
SSL::cert mode require
SSL::renegotiate
}
}
}
when HTTP_REQUEST_SEND {
clientside {
if { [HTTP::uri] starts_with "/manual" } {
if { [SSL::cert count] > 0 } {
HTTP::header replace X-Client-Cert [b64encode [SSL::cert 0]]
}
}
}
}
