Forum Discussion
Cristian_Gal
Nimbostratus
NimbostratusAPM portal mode and On Demand Certificate Authentication
Hi,
We have to deploy authentication with APM, 11.4.1 for some web applications, authentication will include Client Certificate Authentication, OCSP Authentication and LDAP authentication. Every...
Kris__109062Nimbostratus
NimbostratusI ran into this problem too.
To make 'session.ssl.cert.valid" = 0 and not 27 I had to set the client SSL profile to "ignore" (which it already was) but then also configure the CA Cert/Bundle as a Trusted Certificate Authority.
Once I did that then 'session.ssl.cert.valid' value was "0"
For more security I also changed the On-Demand Cert auth successful expression to..
expr { [mcget {session.ssl.cert.valid}] == "0" && [mcget {session.ssl.cert.serial}] == "