For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mrichter's avatar
mrichter
Icon for Nimbostratus rankNimbostratus
Aug 05, 2015

APM: X509_verify_cert failed: error #: 20 at depth 0, error message:unable to get local issuer certificate

I'm having an issue with certificates on Macintosh systems generating this error when attempting to use client certification authentication.   I have the proper CA-bundle applied and a similar c...
BIG-IP Access Policy Manager (APM)
security
kunjan_118660's avatar
kunjan_118660
Icon for Cumulonimbus rankCumulonimbus
Aug 06, 2015

Does this shed any clue?

 

security find-identity -p ssl-client -v

 

  • mrichter's avatar
    mrichter
    Icon for Nimbostratus rankNimbostratus
    Aug 06, 2015
    Kunjan - the proper identity does show up - however a second identity shows up as well which shouldn't be used in ssl-client at all.
  • mrichter's avatar
    mrichter
    Icon for Nimbostratus rankNimbostratus
    Aug 06, 2015
    This looks like the issue - for some reason the Edge-client doesn't seem to loop through the certificates and picks the first one in this. I temporarily deleted the first identity certificate and now things are working as expected. Thoughts on the best way to resolve this?