LB decisions based on SSL CA and Common Name

Product Discussions aFleX
1

#################################################
#
# aFleX script to make decisions based on the CA
# and Common Name of a Client Certificate.
#
`#################################################

when RULE_INIT { set ::DEBUG 0 }

when CLIENTSSL_CLIENTCERT { set CCcert [SSL::cert 0] set CCsubject [X509::subject $CCcert] if { $::DEBUG == 1 } { log "Client SSL Cert Subject: $CCsubject – Complete Cert: $CCcert" } }

when HTTP_REQUEST { if { [HTTP::uri] matches {/api/[0-9]} } { if { $CCsubject matches {<CA_SIGNER>} } { do something… if { $CCsubject matches {*} } { do something… } } else { if { $::DEBUG == 1 } { log "SSL Connection is dropped" } drop } } }`