AUTH::resposne_data

I have an SSL Cert and am using CRLDP on an LDAP server to accept/reject the cert based on revocation. However, I cannot grab the AUTH::response_data. Below is the irule:

 

 

when CLIENT_ACCEPTED {

 

set tmm_auth_ssl_crldp_sid 0

 

set tmm_auth_ssl_crldp_done 0

 

}

 

 

when CLIENTSSL_CLIENTCERT {

 

set tmm_auth_ssl_crldp_done 0

 

if {$tmm_auth_ssl_crldp_sid == 0} {

 

set tmm_auth_ssl_crldp_sid [AUTH::start pam default_ssl_crldp]

 

if {[info exists tmm_auth_subscription]} {

 

AUTH::subscribe $tmm_auth_ssl_crldp_sid

 

log local0. "Subscribing $tmm_auth_subscription"

 

}

 

}

 

AUTH::cert_credential $tmm_auth_ssl_crldp_sid [SSL::cert 0] AUTH::cert_issuer_credential $tmm_auth_ssl_crldp_sid [SSL::cert issuer 0] AUTH::authenticate $tmm_auth_ssl_crldp_sid

 

set tmm_auth_subscription [AUTH::subscribe $tmm_auth_ssl_crldp_sid]

 

log local0. "$Authenticating cert with crldp ID: $tmm_auth_ssl_crldp_sid"

 

log local0. "$tmm_auth_subscription"

 

SSL::handshake hold

 

}

 

 

when CLIENTSSL_HANDSHAKE {

 

set tmm_auth_ssl_crldp_done 1

 

}

 

 

when AUTH_RESULT {

 

if {[info exists tmm_auth_ssl_crldp_sid] and \

 

($tmm_auth_ssl_crldp_sid == [AUTH::last_event_session_id])} {

 

log local0. "$tmm_auth_ssl_crldp_sid"

 

array set auth_response_data [AUTH::response_data]

 

log local0. "Array auth_data has [array size auth_response_data] elements."

 

 

foreach value [array names auth_response_data] {

 

log local0. "$value"

 

}

 

set tmm_auth_status [AUTH::status]

 

if {$tmm_auth_status == 0} {

 

log local0. "Authorization success!"

 

set tmm_auth_ssl_crldp_done 1

 

SSL::handshake resume

 

} elseif {

 

$tmm_auth_status != -1 || $tmm_auth_ssl_crldp_done == 0} {

 

log local0. "Authorization failure." reject

 

}

 

}

 

}

 

 

Thnaks,

 

 

Mitch