iRule example to extract specific X509 information: SOL5171

Thank you.

 

 

We tried this.

 

 

when CLIENTSSL_CLIENTCERT {

 

set cert [SSL::cert 0]

 

set sn [X509::serial_number $cert]

 

log local0. "cert is $cert" ; This works

 

log local0. "sn is $sn" ; This works

 

}

 

when HTTP_REQUEST {

 

if { [info exists $sn] } {

 

HTTP::header insert Serial $sn

 

log local0. "sn is $sn" ; This DOES NOT work. Blank Value

 

}

 

}

 

 

Any variable that is set in the CLIENTSSL_CLIENTCERT section, does not pass to the HTTP_REQUEST section.

 

We tried this with multiple different X509 variables.

 

 

We are running version 9.1.2, could this be a bug?