Forum Discussion

Kevin_48708's avatar
Kevin_48708
Icon for Nimbostratus rankNimbostratus
Nov 09, 2011

Can SAN certificates be used for Device certificates?

Hello     I'm attemting to apply 3rd party signed certificates as device certificates on a GTM and LTM deployment.     I have created a trust chain by concatenating the Root and Intermed...
config
design
Fabien_V__28825's avatar
Fabien_V__28825
Icon for Nimbostratus rankNimbostratus
Dec 15, 2011
Hi

 

 

How did you solve this problem ?

 

 

 

I have followed all documentation, included the documentation provided in this topic, but I still avoir iqsh communication errors between GTM and LTM ...

 

 

 

From the GTM :

 

iqdump 10.0.20.253

 

8096:error:14094413:SSL routines:SSL3_READ_BYTES:sslv3 alert unsupported certificate:s3_pkt.c:1054:SSL alert number 43

 

---

 

 

[...]

 

---

 

SSL handshake has read 1901 bytes and written 2061 bytes

 

---

 

New, TLSv1/SSLv3, Cipher is AES256-SHA

 

Server public key is 1024 bit

 

SSL-Session:

 

Protocol : TLSv1

 

Cipher : AES256-SHA

 

Session-ID:

 

Session-ID-ctx:

 

Master-Key: ....

 

Key-Arg : None

 

Compression: 1 (zlib compression)

 

Start Time: 1323953942

 

Timeout : 7200 (sec)

 

Verify return code: 0 (ok)

 

---

 

 

 

 

But GTM still cannot communicate with LTM.

 

 

 

openssl verify -purpose sslserver -CAfile /config/httpd/conf/ssl.crt/ca_coreye.crt /config/httpd/conf/ssl.crt/server.crt

 

/config/httpd/conf/ssl.crt/server.crt: OK

 

 

 

 

Thanks in advance for your help ;)