Forum Discussion
ekaleido
Cirrus
CirrusWhat is this iRule doing?
I am apparently losing my mind. So without giving my understanding for the following iRule, can someone wiser than I explain what this iRule is doing?
when CLIENTSSL_HANDSHAKE {
if {[SSL::cert cou...
Kevin_Stewart
Employee
Employee$Expected_hash is the result of a data group match of the "CN=bob" key. The data group lookup [class lookup $cSSLSubject authGroup] is looking in the data group called "authGroup" for a value of "CN=bob", and if there's a match it returns the corresponding value, which is a hash.
If by changing the cert you mean changing the client cert, then of course the hash on that certificate would change, and most certainly not match the one you have stored in the data group. As for changing the clientssl profile, I guess it depends on what you changed.
