Forum Discussion
ciscoarc
May 29, 2018Nimbostratus
Verifying CN received (client auth)
Hi guys,
I'm trying to verify client auth certificate and using this iRule, but from the logs I can see it's always Accepted even though my trusted_certs only has 1 CN;
i.e: my trusted_certs is...
Simon_Blakely
May 29, 2018Employee
I think what is happening is:
The way you created your datagroup has created a datagroup element with a name of "CN" and a value of "3456.xxxx.yyyy.zzz".
Your extraction from the certificate is CN=1234.xxxx.yyyy.zzz
So the contains match is for "CN", and will always match. You can create your datagroup without the CN= element at all, or specify the -value specifier to match on the values.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects