Forum Discussion

Ted_51200's avatar
Ted_51200
Icon for Nimbostratus rankNimbostratus
Mar 28, 2008

Pull info from SSL Client Cert

I need an irule to pass on Client Cert information from a HTTPS request to the backend pool

 

 

Attributes I'd like sent along in HTTPS headers:

 

 

Certificate status - The status of the client certificate. The value of [status] can be NoClientCert, OK, or Error. If status is NoClientCert, only this header is inserted into the request. If status is Error, the error is followed by a numeric error code.

 

Certificate serial number

 

Issuer of the certificate

 

Certificate subject (Distinguished name or DN)

 

 

Thanks to anyone that can help me out.
application delivery
dev
devops
iRules

1 Reply

Sort By
  • Nicolas_Menant's avatar
    Nicolas_Menant
    Icon for Employee rankEmployee
    Mar 28, 2008
    Hi,

     

     

    To do so you'll need the BIGIP to be the SSL termination of the the HTTPS flow.

     

     

    Then you can use those commands to do the kjob :

     

     

    Certificate serial number: Click here

     

    Certificate issuer: Click here

     

    Certificate subject: Click here

     

     

    An example of certificate manipulation can be found here: Click here

     

     

    to insert HTTP header it is simple: Click here

     

     

    Here is an example of code to work from:

     

    
when HTTP_REQUEST
{ 
  set pkiSubject [X509::subject $the_cert]
  set pkiIssuer [X509::issuer $the_cert]
  HTTP::header insert CN $pkiSubject
  HTTP::header insert SSLIssuer $pkiIssuer
  HTTP::header insert SSLClientCertSN [regsub -all {:} [X509::serial_number $the_cert] -]
}