Forum Discussion

Nimbostratus

Sep 08, 2020

Irule explanation

Hi can some explain what the following Irule is looking to do when CLIENTSSL_CLIENTCERT { if { [SSL::cert 0] ne "" }{ if { not [class match -- [X509::subject [SSL::cert 0]] contains [v...

MVP

Sep 08, 2020

Hi,

in brief, this irules checks the CN of the X509 certificate in order to verify if it's present in the DataGroup [virtual name]_cert_dg , if not compliant it rejects the call.

More details here :

https://clouddocs.f5.com/api/irules/X509__subject.html

https://clouddocs.f5.com/api/irules/SSL__cert.html

Regards

Forum Discussion

Irule explanation

Recent Discussions

import live updates from version x to version y

Tenant image upgrade

iRule editor partition button does not work

F5Access | MacOS Sonoma

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Related Content

Hands-on Explanation of Kubernetes Role-Based Access Control

explanation about tmm usage

irule

Avoiding Common iRules Security Pitfalls

Simple Sideband - iRule sideband the easy way