topic Re: Client Authorization doesn't work WebNS 7.40 in Application Networking

Client Authorization doesn't work WebNS 7.40

ns — Thu, 25 Nov 2004 18:38:02 GMT

Hi,

I have a problem with client authorization on a CSS11501. The client auth worked on a SCA 11000 and we're trying to migrate to the CSS but as soon as we configure ssl-server 1 authentication enable and the ssl-server 1 cacert xxx the webpage stops working.

On the SCA the certificate was a chained with another, on the CSS they are not chained.

Is this why it doesn't work?

Thanks,

Niels

Re: Client Authorization doesn't work WebNS 7.40

Gilles Dufour — Fri, 26 Nov 2004 08:11:44 GMT

Niels,

is it a new certificate or is it the same one ?

You should now if the certificate is chained or not

Here is a link to the procedure to install a chained certificate on the CSS.

http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_tech_note09186a00801de89b.shtml

Regards,

Gilles.

Re: Client Authorization doesn't work WebNS 7.40

d.alves — Wed, 09 Feb 2005 20:57:11 GMT

I got client authentication to work only after upgrading my CSS-11503 to sg0740107s

Re: Client Authorization doesn't work WebNS 7.40

c.downie — Fri, 25 Feb 2005 10:19:27 GMT

Gilles, can you confirm that this version of code is required then to get client authentication working?

I am having problems getting it working with version

sg0740007s using the following code:

ssl-server 7

ssl-server 7 vip address x.x.x.x

ssl-server 7 cipher rsa-with-3des-ede-cbc-sha x.x.x.x 8050

ssl-server 7 rsakey testkey

ssl-server 7 rsacert testcert

ssl-server 7 cacert root-ca

ssl-server 7 cacert subcert

ssl-server 7 failure redirect

ssl-server 7 failure-url http://www.service_css.com

ssl-server 7 authentication enable

Re: Client Authorization doesn't work WebNS 7.40

Gilles Dufour — Fri, 25 Feb 2005 11:24:54 GMT

I would say it should work with both.

However, we changed a lot of things regarding authentication between the 2 images.

The most important bugs are

CSCef35877, CSCeg40412

Regards,

Gilles.