Forum Discussion

johnko05_45751's avatar
johnko05_45751
Icon for Nimbostratus rankNimbostratus
Jul 23, 2008

SSL iRule on a non-SSL VIP??

This iRule inserts specific headers depending on whether the connection is HTTPS-AUTH (requiring a client certificate), HTTPS, or HTTP. I am able to apply this iRule to the HTTPS and HTTPS-AUTH VIPs ...
Deb_Allen_18's avatar
Deb_Allen_18
Historic F5 Account
Jul 23, 2008
You can "hide" the SSL commands from the interpreter by stuffing them into variables, then eval'ing the vars, something like this:
   
   when HTTP_REQUEST {   
   ...   
   if {[PROFILE::exists clientssl] == 1} {   
      set cname "SSL::cipher name"   
      set cbits "SSL::cipher bits"   
      set cver "SSL::cipher version"   
      HTTP::header replace SSLCipher [eval $cname]:[eval $cbits]-[eval $cver]   
   ...

HTH

/deb