Forum Discussion
Kannan_Thalaia1
Cirrus
CirrusC3D, Client Certificate passing issue
For application new requirement, we need to pass the client certificate to backend server. We enabled the C3D option on the client and server SSL profile. I created the CA certificate and key (...
Daniel_Wolf
MVP
MVPHi Kannan,
your config looks right. From my memory there are two things that could possibly be wrong.
First: The CA key/certificate you are using for C3D is not capable to create new certificates (must be type: Issuing CA Certificate).
Second: the application / web server does not trust certificates issued by this Issuing CA. Did you import this certificate on the application / web server as a trusted CA?
You can do a tcpdump between the F5 and the application / web server and you will see the TLS handshake, from the handshake / tcpdump you can export the certificates that the F5 sends to the backend and check if they are issued properly.
KR
Daniel