We need to create an iRule that can verify client's certificate by checking the Subject line contains "CN=ABCD".

Should the below work?

 

 

when CLIENTSSL_CLIENTCERT {

 

set cert [SSL::cert 0]

 

set subject [X509::subject $cert]

 

set clientIP [IP::client_addr]

 

 

if { $subject contains "CN=ABCD.com" } {

 

pool abcd } {

 

log local0. "cert CN valid" }

 

else {

 

log $clientIP

 

log local0. "cert CN not valid"

 

reject

 

}

 

}