Forum Discussion

Nimbostratus

May 04, 2018

SSL connection fail: basic constraints check failed: this is not a CA certificate

Hi guys, I have a problem with https connection via F5: (MY SERVER/ APP) ---https request----> F5 (irule which copy auth info to header) ------http request---> another app Ive created keystore (...

BIG-IP

security

Samir_Jha_52506

Noctilucent

May 04, 2018

As per error, it seems you need to install cert n root cert at Oracle/soa application filestore. Please do the debug at server side n get the exact location and install certificate and bounce service.. Hope issue will solve.

michalf_360460
Nimbostratus
May 04, 2018
I dont understand how can I install cert/root cert at Oracle app filestore. I`ve already created keystore on my app using keytool. I think the problem is not trusting F5 to my configuration. Am I right?

I generated only keystore (
keytool -genkey -alias tomcat -keyalg RSA -keystore /keystore-location -storepass password
) I didnt create Certificate Request and send it to CA
Samir_Jha_52506
Noctilucent
May 04, 2018
You need to push cert to Oracle/SOA
keystore-client.jks
violet & issue will solve. Its not the issue of F5 configuration. Issue exist with Backend server..
michalf_360460
Nimbostratus
May 04, 2018
You need to push cert to Oracle/SOA
Which cert do you mean? cert from F5?
Samir_Jha_52506
Noctilucent
May 04, 2018
What ever cert you are applying on F5 same to be applied on application level.
michalf_360460
Nimbostratus
May 04, 2018
I have properties file in my application level and keystore-client.jks is pushed into my spring application in every start. It is tested without F5 and works OK. I have no idea why it doesnt work via F5