HTTPS Request?

Hi Scott,

 

 

In order for TMM to inspect or modify the HTTP headers/payload of an HTTPS session (and use HTTP events or commands in an iRule), you must configure a client SSL profile to decrypt the SSL. If the serverside connection needs to be done over SSL, you could re-encrypt the traffic using a server SSL profile.

 

 

Aaron

Aaron,

 

 

I tried setting up an SSL Profile using the default settings, but that doesn't seem to have changed anything. Is there anything that has to be done to activate it or associate it with a given iRule? Are there specific settings I should have changed to make it decrypt HTTPS traffic?

 

 

 

Thanks!

 

What do you see in the browser when it fails currently? Can you try testing from the LTM command line?

 

 

curl -kv https://1.1.1.1/

 

 

where 1.1.1.1 is the virtual server address.

 

 

Aaron

It looks like it's returning the html for the configuration utility whenever I do that curl command.

The iRule I'm trying to run prints "Hello World" whenever I try https://1.1.1.1/mytest, but so far it's not working. Here's what curl returns in that case:

 

 

 

Object not found!

 

 

 

 

 

 

 

The requested URL was not found on this server.

 

 

 

 

 

 

 

If you entered the URL manually please check your

 

spelling and try again.

 

 

 

 

 

 

 

 

 

 

 

Error 404

 

 

 

 

 

 

Thu May 26 19:15:03 2011

 

 

 

 

 

 

 

 

* Connection 0 to host 1.1.1.1 left intact

 

* Closing connection 0

 

* SSLv3, TLS alert, Client hello (1):

 

 

 

 

Can you post the iRule you're testing?

 

 

Aaron

Sorry for the delay, here's the iRule I'm using:

 

 

when HTTP_REQUEST {

 

if { [HTTP::uri] eq "/mytest" } {

 

log local0. "Hello World"

 

HTTP::respond 200 content "Hello World" "Content-Type" "text/xml"

 

}

 

}

 

 

 

 

Can you list the virtual server config using 'b virtual VS_NAME list'? Do you see the "Hello World" statement or anything else logged to /var/log/ltm when you test with curl using 'curl -vk https://1.1.1.1/mytest'?

 

 

Aaron

Aaron,

 

 

Nothing gets logged when I try that curl command.

 

 

 

How do you figure out the value for VS_NAME? Sorry I don't really know what I'm doing here, I'm just a developer who has to work with F5 without any previous F5 experience and I'm working on a VMWare image from another F5 that I had no part in setting up.

 

 

 

Thanks!

 

Is there something you can type at the command line to find the virtual server name? I'm still not sure the exact name needed for this command. Thanks!