when HTTP_REQUEST { if { [HTTP::header exists "X-Forwarded-For"]} { HTTP::header remove X-Forwarded-For } if { [HTTP::header exists "ssl.client_cert"]} { HTTP::header remove ssl.client_cert } if { [SSL::cert count] > 0 } { set thecert [findstr [X509::whole [SSL::cert 0]] "-----BEGIN CERTIFICATE-----" 28 "-----END CERTIFICATE-----"] set certnospace [string map -nocase {" " "" \n "" \r ""} $thecert] HTTP::header insert ssl.client_cert $certnospace HTTP::header insert X-Forwarded-For [IP::client_addr] } }