X509::issuer

Description

Returns the issuer of the specified X509 certificate.

Syntax

X509::issuer <X509 certificate>

X509::issuer <X509 certificate>

  • Returns the issuer of the specified X509 certificate.

Examples

when SERVERSSL_HANDSHAKE {
  set ssl_cert [SSL::cert 0]
  log local0. "Cert issuer - [X509::issuer $ssl_cert]"
}


when HTTP_REQUEST {
  log local0. "Cert issuer - [X509::issuer $client_cert]"
  if { [X509::issuer $client_cert] eq "someValue" } {
    pool pool1
  } else {
    HTTP::redirect "https://some_other_site.com/"
  }
}

Note

There is a behavior change since BIGIP-9.3.0 for this command to support multiple languages and RFC 2253 compliance.
Before the change
/CN=Name/OU=UNIT/O=ORG/C=US

After the change

C=US,O=ORG,OU=UNIT,CN=NAME