Forum Discussion
Root certificate is self signed error and page does not open.
I have SSL certificate and whole chain of it which made bundle and uploaded in chain and trusted certificate authorities in Client SSL profile.
Also added all the certificates of the chain in client machine. Now all the certificates authenticated but the problem is that it does not open the server page through VS. Client is offloaded on F5. Open SSL shows that the problem is that root certificate is self signed. Is this the problem of F5 or browser?
4 Replies
- kunjan_118660
Cumulonimbus
You want to do a verify on the certchain and client cert
openssl verify -purpose sslclient -CAfile bundle.crt client.crt
- Thanks for the reply kunjan. I just added trust root certificate to open websites in firefox now all the certificates are verified and when i write https://10.50.171.5:7777 the page of webserver is open and client authentication is set to require that means now my certificates are working fine right? But when i put full url of the application it gives ssl handshake failure error on https://10.50.171.5:7777/ecommunications_enu/starts.swe?
- kunjan
Nimbostratus
You want to do a verify on the certchain and client cert
openssl verify -purpose sslclient -CAfile bundle.crt client.crt
- Thanks for the reply kunjan. I just added trust root certificate to open websites in firefox now all the certificates are verified and when i write https://10.50.171.5:7777 the page of webserver is open and client authentication is set to require that means now my certificates are working fine right? But when i put full url of the application it gives ssl handshake failure error on https://10.50.171.5:7777/ecommunications_enu/starts.swe?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com