For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jacob_Miller_61's avatar
Jacob_Miller_61
Icon for Nimbostratus rankNimbostratus
Oct 06, 2009

X509::subject upgrade issues

We recently upgraded from 9.2.4 (ancient I know) to 9.4.6 (still behind the curve I know) only to discover a problem with one of our iRules. We pull the X509::subject out for the client cert and store it as an HTTP header. In 9.2.4 it was in this format: /C=US/O=ORG/OU=UNIT/CN=Name Now it's in this format: C=US,O=ORG,OU=UNIT,CN=NAME

 

 

Anyone know of a way to get the old format back? We've got a lot of stuff that expects to see the Subject DN in the old format.

 

 

Thanks,

 

jake

 

application delivery
dev
devops
iRules

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 06, 2009
    Hi Jake,

     

     

    I'm not sure why the change was made. A quick fix might be to map the commas back to forward slashes:

     

     

    set subject=[string map ", /" $subject]

     

     

    You could open a case with F5 Support to find out when/why the change was made.

     

     

    Aaron
  • Jacob_Miller_61's avatar
    Jacob_Miller_61
    Icon for Nimbostratus rankNimbostratus
    Oct 06, 2009
    Sorry I should really read first, it's been taclked in the past:

     

    http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=22344

     

     

    Thanks for all your help,

     

    Jake