Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

ACE-4710 : Forwarding of client certificate information

Hello,

I have an environment with SSL termination and client authentication with a client certificate. Now, the backend server application needs to be informed of the client DN information present in the presented client certificate. Is it possible to tell the ACE to send specific client certificate fields to the backen server via insertion of an HTTP header or, to forward the entire client certificate in any way to the backend server ?

Thank you for any comment,

Yves Haemmerli

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Community Member

Re: ACE-4710 : Forwarding of client certificate information

This can be done using ACE Module version 3.0 onwards:

host1/Admin(config-actlist-modify)# ssl header-insert client-cert Subject

More information is in the "SSL Configuration Guide".

Greetings, Kai

2 REPLIES
Community Member

Re: ACE-4710 : Forwarding of client certificate information

This can be done using ACE Module version 3.0 onwards:

host1/Admin(config-actlist-modify)# ssl header-insert client-cert Subject

More information is in the "SSL Configuration Guide".

Greetings, Kai

Community Member

Re: ACE-4710 : Forwarding of client certificate information

Kai,

Thank you for your answer, it took one and an half year to get an answer, but yours is definitely the good one :-)

Best regards

Yves

561
Views
0
Helpful
2
Replies
CreatePlease to create content