CSS11501 and client certificate processing

robert — Fri, 04 Mar 2005 21:42:07 GMT

I use CSS 11501 to accelerate ssl sessions and autheticate users.

CSS gets the certificate from the client browser. The certificate DN contains for example:

"CN=info1, SERIALNUMBER=REGON: 321123321, OU=info2, O=info3, C=PL".

The CSS sends the certificate to beckend servers as:

"C=PL, O=info3, OU=info2 ADR, SN=REGON: 321123321, CN=info1".

There are two incorrect things:

1. The order of attributes in DN is reversed. This is not compliant with RCF 1779.

2. SERIALNUMBER is replaced to SN string.

How to resolve this problem ?

Re: CSS11501 and client certificate processing

Gilles Dufour — Sun, 06 Mar 2005 10:58:05 GMT

what's your version ?

Are you re-encrypting traffic in the backend ?

Or ar you using the header insert feature ?

What is your config ?

I do not think we touch the certificate.

We simply forward it as we receive it.

But I can verify.

Gilles.