Forum Discussion

George_San_Pedr's avatar
George_San_Pedr
Icon for Altostratus rankAltostratus
Nov 25, 2005

tracing invalid/expired certificates

Hi,

 

 

How do I write an irule that logs when a client tries to login with an invalid or expired ssl certificate?

 

 

 

 

Thanks,

 

 

George
  • Hi George,

     

     

    if you verify it within the LTM take a look at this field:

     

     

    SSL::verify_result

     

     

    Returns the result code from peer certificate verification using the same

     

    values as the OpenSSL SSL_get_verify_result() function.

     

     

    Have a look at the openssl documentation looking for return codes to that value.

     

     

    Than wrap that into a if statement and add the logging line.

     

     

    Regards,

     

    Edi