Forum Discussion
TCL error: Rule Client_cert_in_HTTP_Header2 - while executing "X509::whole $c_cert"
Hello,
we need to forward client ssl cert via http header, here is the sample Irule defined:
when HTTP_REQUEST {
set client_cert [SSL::cert 0]
log local0. "SSL-Parameter: [SSL::cipher name] Cipher Name"
log local0. "SSL-Parameter: [SSL::cipher version] Cipher Version"
log local0. "SSL-Parameter: [SSL::cipher bits] Cipher Bits"
log local0. "SSL-Parameter: [SSL::sessionid] Session ID"
log local0. "SSL-Parameter: [X509::subject $client_cert] ClientCert"
HTTP::header insert ClientCertSubject [X509::whole $client_cert] }
unfortunatly the irule doesn't work we have the following error:
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: RC4-MD5 Cipher Name
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: TLSv1 Cipher Version
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: 128 Cipher Bits
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: 65e0c25a6772a3d0a3abf3175bfc9ed9bad092af746e840ed341716922f2bae
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: /C=IT/ST=milano/L=milano/O=ugis/OU=Middleware Network/CN=usw11501.esp.internal.usinet.it/emailAddress=ivanovic.mascherpa@ugis.unicredit.it ClientCert
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: RC4-MD5 Cipher Name
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: TLSv1 Cipher Version
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: 128 Cipher Bits
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: 65e0c25a6772a3d0a3abf3175bfc9ed9bad092af746e840ed341716922f2bae
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: /C=IT/ST=milano/L=milano/O=ugis/OU=Middleware Network/CN=usw11501.esp.internal.usinet.it/emailAddress=ivanovic.mascherpa@ugis.unicredit.it ClientCert
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: RC4-MD5 Cipher Name
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: TLSv1 Cipher Version
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: 128 Cipher Bits
Sep 27 12:33:42 tmm tmm[731]: Rule Pippo : SSL-Parameter: 65e0c25a6772a3d0a3abf3175bfc9ed9bad092af746e840ed341716922f2bae
Sep 27 12:33:42 tmm tmm[731]: 01220001:3: TCL error: Rule Pippo - while executing "X509::whole $client_cert"
Please can you help ?
Thanks a lot
Riz
- It's interesting that in your log, the last entries, where the X509::whole command failed, there is no entry for the X509::subject command either. It seems as though the X509 commands didn't like the cert that got passed that time. Did something change?
Odd...
Colin
