Forum Discussion

yeser's avatar
yeser
Icon for Nimbostratus rankNimbostratus
Nov 05, 2008

sys_auth_ssl_cc_ldap

In this part of the iRule _sys_auth_ssl_cc_ldap:

 

 

when CLIENTSSL_CLIENTCERT {

 

set tmm_auth_ssl_cc_ldap_done 0

 

if {$tmm_auth_ssl_cc_ldap_sid == 0} {

 

set tmm_auth_ssl_cc_ldap_sid [AUTH::start pam default_ssl_cc_ldap]

 

if {[info exists tmm_auth_subscription]} {

 

AUTH::subscribe $tmm_auth_ssl_cc_ldap_sid

 

}

 

}

 

AUTH::cert_credential $tmm_auth_ssl_cc_ldap_sid [SSL::cert 0]

 

AUTH::authenticate $tmm_auth_ssl_cc_ldap_sid

 

SSL::handshake hold

 

}

 

 

which is the function of the command "AUTH::cert_credential", getting user cert subject (Distinguished name in most of the cases)?

 

 

Thanks

 

  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    I'm not sure I follow your question. Are you asking what that command does?

     

     

    Colin
  • yeser's avatar
    yeser
    Icon for Nimbostratus rankNimbostratus
    Yes, the explanation "Sets the peer certificate credential to the value of a peer certificate" does not convince me at all.

     

     

    Peer certificate credential = subject?