Forum Discussion
ekanathdas_2662
Nimbostratus
NimbostratusWe need to create an iRule that can verify client's certificate by checking the Subject line contains "CN=ABCD".
Hi team, I was looking out for an irule which can check client's certificate by checking the Subject line if it contains "CN=ABCD". I had referred to the below site: https://devcentr...
ekanathdas_2662Nimbostratus
NimbostratusShould the below work?
when CLIENTSSL_CLIENTCERT {
set cert [SSL::cert 0]
set subject [X509::subject $cert]
set clientIP [IP::client_addr]
if { $subject contains "CN=ABCD.com" } {
pool abcd } {
log local0. "cert CN valid" }
else {
log $clientIP
log local0. "cert CN not valid"
reject
}
}