Forum Discussion

Joe_White_45290's avatar
Joe_White_45290
Icon for Nimbostratus rankNimbostratus
Jan 06, 2010

SOAP request for SSL Authentication

Hi

 

 

We have an application that uses an iFrame to pull data from a secure source. The secure source is another web application that sits behind a Big-IP. We have a trusted certificate from a CA installed on the F5 and the remote server.

 

 

The remote server makes a call to the secure application via the Big-IP on SSL using the CA certificate. It also makes a SOAP request to validate against a self signed certificate, also on the Big-IP.

 

 

We have the path to the cert store on the Big-IP, but he request is also looking for a password to the cert-store. I am unable to determine how to set up a password for the cert store on the Big-IP.

 

 

Any help please....

 

 

Joe
config
design
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jan 07, 2010
    Hi Joe,

     

     

    You should only have passphrases (or passwords) on private keys. I don't think you can have a passphrase on a cert. And you shouldn't need a private key for an intermediate, chain or root cert.

     

     

    Can you clarify what you've configured in terms of client and/or server SSL profiles on LTM, what testing you're trying and the results from the client/LTM/server perspective?

     

     

    Thanks,

     

    Aaron
  • Joe_White_45290's avatar
    Joe_White_45290
    Icon for Nimbostratus rankNimbostratus
    Jan 13, 2010
    Thanks Aaron

     

     

    The developers have now changed their minds. They connect in to a client profile which has been configured with a CA certificate. To reverse authenticate, they then make a SOAP call from a Base64 file to a PFX file which has a passphrase (they failed to mention the PFX before). This was starting to work and, for other reasons, the project has now been cancelled.

     

     

    On to the next one.

     

     

    Joe