# From which version is ssl client certificate information in http headers available?

**URL:** <https://discourse.haproxy.org/t/from-which-version-is-ssl-client-certificate-information-in-http-headers-available/806>\
**Category:** Help!\
**Created:** [November 18, 2016, 9:20am UTC](https://discourse.haproxy.org/t/from-which-version-is-ssl-client-certificate-information-in-http-headers-available/806 "2016-11-18T09:20:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lists.dg](https://avatars.discourse-cdn.com/v4/letter/l/b77776/32.png) [@lists.dg](https://discourse.haproxy.org/u/lists.dg)\
**Post date:** [November 18, 2016, 9:20am UTC](https://discourse.haproxy.org/t/from-which-version-is-ssl-client-certificate-information-in-http-headers-available/806/1 "2016-11-18T09:20:11Z")

</div>

Hi everyone,

I am using haproxy 1.5.4 and haproxy 1.5.14 and I would like to know from wich version is the capability of inserting client certificate information in HTTP headers and forward them to the backend available.

Do my versions permit forwarding the following certificate information?:

http-request set-header X-SSL %[ssl\_fc]  
http-request set-header X-SSL-Session\_ID %[ssl\_fc\_session\_id,hex]  
http-request set-header X-SSL-Client-Verify %[ssl\_c\_verify]  
http-request set-header X-SSL-Client-DN %{+Q}[ssl\_c\_s\_dn]  
http-request set-header X-SSL-Client-CN %{+Q}[ssl\_c\_s\_dn(cn)]  
http-request set-header X-SSL-Issuer %{+Q}[ssl\_c\_i\_dn]  
http-request set-header X-SSL-Client-NotBefore %{+Q}[ssl\_c\_notbefore]  
http-request set-header X-SSL-Client-NotAfter %{+Q}[ssl\_c\_notafter]

Thanks in advance,  
Daniel

---

<div class="post-metadata">

**Author:** ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)\
**Post date:** [November 21, 2016, 5:44pm UTC](https://discourse.haproxy.org/t/from-which-version-is-ssl-client-certificate-information-in-http-headers-available/806/2 "2016-11-21T17:44:09Z")

</div>

You can find this information in doc/configuration.txt in the relevant tar, that said those features have been committed in 1.5-dev16, meaning any 1.5 release has this feature builtin.