Chapter 3: Condition Reference
user.x509.issuer=
Tests the issuer of the x509 certificate used in authentication to certificate realms. The user.x509.issuer= condition is primarily useful in constructing explicit certificate revocation lists. This condition will only be true for users authenticated against a certificate realm.
Syntax
user.x509.issuer=issuer_DN
where issuer_DN is an RFC2253 LDAP DN, appropriately escaped. Comparisons are
Layer and Transaction Notes
•Use in <Proxy>, <Admin>, and <Exception> Layers.
•Applies to proxy transactions.
See Also
•Conditions: user.x509.serialNumber=, user.x509.subject=
•Properties: authenticate( ), authenticate.force( )
147
