Skip to content

Instantly share code, notes, and snippets.

@marcelog

marcelog/passing_client_ssl_certificate_options_haproxy.conf

Last active November 21, 2023 18:22
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save marcelog/ad12a165d9ec6a695dd524c2c28ac644 to your computer and use it in GitHub Desktop.
Save marcelog/ad12a165d9ec6a695dd524c2c28ac644 to your computer and use it in GitHub Desktop.
Download ZIP
Sample haproxy configuration snippet that will pass the SSL client certificate information to your application
Raw
passing_client_ssl_certificate_options_haproxy.conf
mode http
http-request set-header X-SSL %[ssl_fc]
http-request set-header X-SSL-Client-Cert %[ssl_fc_has_crt]
http-request set-header X-SSL-Client-Verify %[ssl_c_verify]
http-request set-header X-SSL-Client-SHA1 %{+Q}[ssl_c_sha1,hex]
http-request set-header X-SSL-Client-DN %{+Q}[ssl_c_s_dn]
http-request set-header X-SSL-Client-CN %{+Q}[ssl_c_s_dn(cn)]
http-request set-header X-SSL-Issuer %{+Q}[ssl_c_i_dn]
http-request set-header X-SSL-Client-Not-Before %{+Q}[ssl_c_notbefore]
http-request set-header X-SSL-Client-Not-After %{+Q}[ssl_c_notafter]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment