Forum Discussion
'unhandled critical extension' error in SSL client authentication
Hi!
I'm receiving this error while trying to authenticate certificates using a Windows CA bundle. Reading about it I found that there is a kind of incompatibility between Windows CA and OpenSSL.
Have someone ever faced this error before? Is there any possible configuration for the ssl client profile to get it working?
Thank-you,
Renato A. Ferreira
- Sec-Enabled_658Cirrostratus
Has anyone found a way around this issue?
- Arnaud_LemaireEmployee
i think first we need to know which critical extension is causing the issue. could you put ssl at debug level and see what happens in /var/log/ltm ?
- Abdessamad1Cirrostratus
Dear,
I saw a similar issue with the certificate transparency extension which is also set to critical and cause the ssl client authentication to fail.
1.3.6.1.4.1.11129.2.4.3: critical
https://www.alvestrand.no/objectid/submissions/1.3.6.1.4.1.11129.2.4.3.html
Anyone got a workaround for this issue?
Thanks.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com