Forum Discussion
Willda71_98408
Nimbostratus
NimbostratusSSL/NON-SSL
Hi there,
i originally posted this in the security group but a member said Id be better off posting it here. He said i could achieve what...
If the back end server needs to see what client cert was presented, you can throw it in the HTTP header
when HTTP_REQUEST {
if { [SSL::cert count] > 0 } {
set thecert [findstr [X509::whole [SSL::cert 0]] "-----BEGIN CERTIFICATE-----" 28 "-----END CERTIFICATE-----"]
set certnospace [string map -nocase {" " "" \n "" \r ""} $thecert]
HTTP::header insert ssl.client_cert $certnospace
}
}