Forum Discussion
Jim_24689
Nimbostratus
Nimbostratustwo way SSL and Trusted Certificate Authorities
Hello -
I understand that when a client presents a certificate that it can be verified as being issued from a trusted CA authority. What I don't know how to do is create the bundle of trusted C...
Kevin_Stewart
Employee
EmployeeYou need the base64 "PEM" versions of the CA certificates. If you open them up in a text editor, they'll start with "===== BEGIN CERTIFICATE =====" and end with "====== END CERTIFICATE =====". The easiest way to get these, at least in Windows, is to first install it and then export it as base64. Once you have all of the CA certificates in base64, simply create a text file and add the text of each to the file, including the BEGIN and END headers/footers. Import this file as your CA bundle in the client SSL profile.
Also note that in order to validate a client certificate, you must have all of the CA certificates in the path from the issuer to the root. Example:
CA root -> subordinate CA -> issued client certificate
