Skip to content

Instantly share code, notes, and snippets.

@vivekraj59

vivekraj59/passing_client_ssl_certificate_options_haproxy.conf

Forked from marcelog/passing_client_ssl_certificate_options_haproxy.conf
Created November 21, 2023 18:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save vivekraj59/e1905dd915e243994924e08d2f351656 to your computer and use it in GitHub Desktop.
Save vivekraj59/e1905dd915e243994924e08d2f351656 to your computer and use it in GitHub Desktop.
Download ZIP
Sample haproxy configuration snippet that will pass the SSL client certificate information to your application
Raw
passing_client_ssl_certificate_options_haproxy.conf
mode http
http-request set-header X-SSL %[ssl_fc]
http-request set-header X-SSL-Client-Cert %[ssl_fc_has_crt]
http-request set-header X-SSL-Client-Verify %[ssl_c_verify]
http-request set-header X-SSL-Client-SHA1 %{+Q}[ssl_c_sha1,hex]
http-request set-header X-SSL-Client-DN %{+Q}[ssl_c_s_dn]
http-request set-header X-SSL-Client-CN %{+Q}[ssl_c_s_dn(cn)]
http-request set-header X-SSL-Issuer %{+Q}[ssl_c_i_dn]
http-request set-header X-SSL-Client-Not-Before %{+Q}[ssl_c_notbefore]
http-request set-header X-SSL-Client-Not-After %{+Q}[ssl_c_notafter]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment