Forum Discussion
Josh_Abaire
Jun 07, 2012Nimbostratus
SSL Client Auth
I'm having trouble getting SSL Client Authentication to work, I've never done it before. The customer wants partners to obtain their own SSL certs from whatever authority they choose, then have the r...
Jake_39981
Jun 13, 2012Nimbostratus
Sorry, didn't see this till your recent post. I did this same thing last year. Your cat statement doesn't combine the root and intermediary certs. It only takes the root cert and creates a bundle cert with only the root cert in it. You need to include both root and intermdiary certs to create the bundle, so it'd look like:
cat /config/ssl/ssl.crt/intermediate.crt /config/ssl/ssl.crt/godaddy-root.crt > /config/ssl/ssl.crt/godaddy-bundle.crt
Set trusted authority back to ca-bundle
Set advertised authority back to 'none' (this only advertises your list of trusted auths to clients, not necessary and reduces security)
Set "CHAIN" to your new bundle - this is where your bundle is referenced.
Cheers!
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects