Forum Discussion

Jake_39981's avatar
Jake_39981
Icon for Nimbostratus rankNimbostratus
Mar 05, 2012

Chain Certificates / Client SSL Profile

We have one Virtual Server and client SSL profile shared by multiple clients coming in. One client is presenting a client cert signed by an intermediary "VeriSign Class 3 Extended Validation SSL CA" ...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Mar 05, 2012
Hi Jake,

 

 

I think you're correct on both points. The client should check its client cert against each of the intermediate certs in the bundle that TMM sends during the SSL handshake. It would be good to test this to confirm with two client certs signed by different CAs.

 

 

Aaron