Forum Discussion
George_San_Pedr
Altostratus
Nov 25, 2005tracing invalid/expired certificates
Hi,
How do I write an irule that logs when a client tries to login with an invalid or expired ssl certificate?
Thanks,
George
1 Reply
- Eduard_Laera_26
Nimbostratus
Hi George,
if you verify it within the LTM take a look at this field:
SSL::verify_result
Returns the result code from peer certificate verification using the same
values as the OpenSSL SSL_get_verify_result() function.
Have a look at the openssl documentation looking for return codes to that value.
Than wrap that into a if statement and add the logging line.
Regards,
Edi
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
