For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yeser's avatar
yeser
Icon for Nimbostratus rankNimbostratus
Nov 05, 2008

sys_auth_ssl_cc_ldap

In this part of the iRule _sys_auth_ssl_cc_ldap:

 

 

when CLIENTSSL_CLIENTCERT {

 

set tmm_auth_ssl_cc_ldap_done 0

 

if {$tmm_auth_ssl_cc_ldap_sid == 0} {

 

set tmm_auth_ssl_cc_ldap_sid [AUTH::start pam default_ssl_cc_ldap]

 

if {[info exists tmm_auth_subscription]} {

 

AUTH::subscribe $tmm_auth_ssl_cc_ldap_sid

 

}

 

}

 

AUTH::cert_credential $tmm_auth_ssl_cc_ldap_sid [SSL::cert 0]

 

AUTH::authenticate $tmm_auth_ssl_cc_ldap_sid

 

SSL::handshake hold

 

}

 

 

which is the function of the command "AUTH::cert_credential", getting user cert subject (Distinguished name in most of the cases)?

 

 

Thanks

 

2 Replies

  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    I'm not sure I follow your question. Are you asking what that command does?

     

     

    Colin
  • yeser's avatar
    yeser
    Icon for Nimbostratus rankNimbostratus
    Yes, the explanation "Sets the peer certificate credential to the value of a peer certificate" does not convince me at all.

     

     

    Peer certificate credential = subject?