Request Client Certificate And Pass To Application

Problem this snippet solves: We are using BigIP to dynamically request a client certificate. This example differs from the others available in that it actually passes the x509 certificate to the ser...
Published Mar 18, 2015
Version 1.0
application delivery
devops
iRules
security
Christopher_Leg's avatar
Christopher_Leg
Icon for Nimbostratus rankNimbostratus
Oct 10, 2016

I am no expert here, but I have an issue with the comment above:

 

"The reason is that CLIENTSSL_HANDSHAKE occurs after HTTP_REQUEST event is processed entirely, but HTTP_REQUEST_SEND occurs after it."

 

This does not seem accurate based on my personal observations that I am able to set variables in CLIENTSSL_HANDSHAKE and access them in HTTP_REQUEST. This "request after handshake" event order is also supported by the excellent event flowchart here: https://devcentral.f5.com/s/feed/0D51T00006i7XB2SAM

 

Thanks.