Forum Discussion
TIm_Maestas
Nimbostratus
NimbostratusSSL cert verify TCL error?
I have the following iRule:
when CLIENTSSL_HANDSHAKE {
set cert [SSL::cert 0 ]
}
when HTTP_REQUEST {
set stuff [X509::subject $cert ]
if { [matchclas...
You may want to try adding this:
when HTTP_REQUEST {
if { [info exists cert] } {
... your existing rule stuff...
} else {
log "No Cert presented"
reject
}
}
Basically, you have to remember there is no guarantee the client presented a certificate before sending an HTTP request.
The "info exists" command is Tcl's way of determining whether a variable has been previously set.
