Forum Discussion
Cristian_Gal
Nimbostratus
Apr 29, 2014APM portal mode and On Demand Certificate Authentication
Hi,
We have to deploy authentication with APM, 11.4.1 for some web applications, authentication will include Client Certificate Authentication, OCSP Authentication and LDAP authentication. Every...
Cristian_Gal
Nimbostratus
May 05, 2014May 5 06:02:01 bigipteste info apd[30089]: 01490007:6: 4cd4576e: Session variable 'session.ssl.cert.end' set to 'May 23 08:53:21 2014 GMT'
May 5 06:02:01 bigipteste info apd[30089]: 01490007:6: 4cd4576e: Session variable 'session.ssl.cert.exist' set to '1'
May 5 06:02:01 bigipteste info apd[30089]: 01490007:6: 4cd4576e: Session variable 'session.ssl.cert.issuer' set to 'C=**,O=****,OU=****,CN=*****'
May 5 06:02:01 bigipteste info apd[30089]: 01490007:6: 4cd4576e: Session variable 'session.ssl.cert.serial' set to '123123123123123123'
May 5 06:02:01 bigipteste info apd[30089]: 01490007:6: 4cd4576e: Session variable 'session.ssl.cert.start' set to 'May 23 08:53:21 2013 GMT'
May 5 06:02:01 bigipteste info apd[30089]: 01490007:6: 4cd4576e: Session variable 'session.ssl.cert.subject' set to 'CN=*****,serialNumber=232323,O=****,L=*****,C=****'
May 5 06:02:01 bigipteste info apd[30089]: 01490007:6: 4cd4576e: Session variable 'session.ssl.cert.valid' set to '27'
It seems that the certificate is there but on demand doesn't set valid to 0. I don't have any errors on the certificate validation, it does have a proper trust certificate chain. I will try this on 11.5 and if it doesn't work I will end up opening a support case.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects