For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AlexS_yb's avatar
AlexS_yb
Icon for Cirrocumulus rankCirrocumulus
Apr 08, 2021

using step up auth to client cert want to insert cert into header

So i have a VS where you have to log in. one url /withcert needs to be protected with the user providing a client cert. This is working, i have a per request policy, that matches the url and then us...
BIG-IP Access Policy Manager (APM)
iRules
security
spalande's avatar
spalande
Icon for Nacreous rankNacreous
Apr 08, 2021

Have you checked what all session variables are populated from the client cert on APM. You can use any of them to add in the header. to begin with - 

when ACCESS_ACL_ALLOWED {
    set certsubject [ACCESS::session data get session.ssl.cert.subject]
	HTTP::header insert "certsubjectdn" $certsubject
	}