Forum Discussion

WeBeJeepin_1470's avatar
WeBeJeepin_1470
Icon for Nimbostratus rankNimbostratus
Aug 08, 2014

How to get the email address from a client certificate and send it through the header in an iRule.

Hi everyone! I am working on an iRule to get the email address off the email client certificate and push it through the header. It is stored in an email field and the Subject Alternative Name. I am having trouble finding what the name of the property is for me to pull it out and put it into the header. I tried session.ssl.cert.email and that did not have a value. Also, what event should I put it in, because that may be my mistake as well. I have been using HTTP_REQUEST. I have also tried this, but I never saw the email go through the header.

 

when CLIENTSSL_CLIENTCERT {

 

SUBJECT ATERNATIVE NAME set santemp [findstr [X509::extensions $c_cert] "Subject Alternative Name" 32 ","] set san [findstr $santemp "email" 6] }

 

Thanks in advance for all of your help!

 

application delivery
devops
iRules

1 Reply

Sort By
  • IheartF5_45022's avatar
    IheartF5_45022
    Icon for Nacreous rankNacreous
    Aug 12, 2014

    The email field is in subject and/or extensions - I'd try logging values from the X509 commands until you find it, then you can adjust your iRule accordingly (you'll find the logged values in /var/log/ltm);-

    when CLIENTSSL_CLIENTCERT {
    log local0. "Subject: [X509::subject [SSL::cert 0]]"
    foreach item [split [X509::extensions [SSL::cert 0]] \n] {
        log local0. "$item"
    }
}