ltm rule command X509 extensions

iRule(1)		      BIG-IP TMSH Manual		      iRule(1)



X509::extensions
       Returns the X509 extensions set on an X509 certificate.

SYNOPSIS
       X509::extensions CERTIFICATE

DESCRIPTION
       Returns the X509 extensions set on the specified X509 certificate.

       Syntax

       X509::extensions 

	    * Returns the X509 extensions set on the specified X509 certificate.
	      If the certificate does not have any extensions, the output is "(no
	      extensions)".
	      If an invalid certificate is supplied, a runtime TCL
	      error is generated.

RETURN VALUE
       Returns the X509 extensions set on an X509 certificate.

VALID DURING
       ANY_EVENT

EXAMPLES
	when CLIENTSSL_CLIENTCERT {
	    set myCert [SSL::cert 0]
	    set result [X509::extensions $myCert]
	    log local0. "X509::extensions $result"

	    if { $result matches_glob "*X509v3 extensions:*X509v3 Basic*" } {
		log local0. "match"
	    } else {
		log local0. "no match"
	    }
	}

HINTS
SEE ALSO
CHANGE LOG
       @BIGIP-9.0.0 --First introduced the command.



BIG-IP				  2017-01-31			      iRule(1)