Forum Discussion

Zuke_149069's avatar
Zuke_149069
Icon for Nimbostratus rankNimbostratus
Oct 02, 2014

SSL certificate issues with Lync 2013

I'm trying to verify the certificate with Lync 2013 but I keep getting error messages when I attempt to verify.

 

openssl verify -purpose sslclient -CAfile /config/filestore/files_d/Common_d/certificate_d/:Common:clyncweb.crt_41052_1 /config/filestore/files_d/Common_d/certificate_d/:Common:clyncwebCA.crt_41060_1

 

/config/filestore/files_d/Common_d/certificate_d/:Common:clyncwebCA.crt_41060_1: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA error 18 at 0 depth lookup:self signed certificate OK

 

Currently I'm running on 11.4.1HF3. Any advice on where to go next with my troubleshooting?

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
LTM
microsoft
security

1 Reply

  • Kevin_K_51432's avatar
    Kevin_K_51432
    Historic F5 Account
    Oct 02, 2014

    Greeting Zuke, I put the client cert first and got the same error. Swapping client and CA certs in the parse order seems to have fixed this:

      openssl verify -purpose sslclient -CAfile auser.crt client_auth-ca.crt
client_auth-ca.crt: C = CA, ST = CA, L = CA, O = CA, OU = CA, CN = ca.com
error 18 at 0 depth lookup:self signed certificate
OK

 openssl verify -purpose sslclient -CAfile client_auth-ca.crt auser.crt
auser.crt: OK

    Hope that helps, Kevin