We have a CSS11506 with SSL module.
We want to initiate a SSL session with a client certificate to a backend server running IIS 5.0 and doing certificate mapping.
We see in the traces that the SSL handshaking is performed but for some reason the SSL module does not send the client certificate. When i import the Certificates into a browser and connect directly to the server with ssl it is working. So it seems that the client trust and certificate check etc. on the remote server side is working.
Certificate and Key file are verified and ok.
- What does the CACert check exactly do? because when you connect with a browser you get a warning that e.g. the hostname does not match the certificate name. But the browser can ignore this. Does the CSS do this as well?
- Does the CSS has to lookup all the URL´s in the certificate? then we have a problem because our CSS is in a DMZ with no DNS resolving. So I have to put in host names but they can only be 16 char. long. and the issuing server Url is longer then 16 char.
- Does anybody has experience with connecting to a remote IIS5.0 server via a backend-server construction.?
Here are some configs:
content YYY-ACC-TKR-OUT
add service YYY-TKR-ACC
advanced-balance arrowpoint-cookie
vip address 192.168.9.103
protocol tcp
port 80
active
service YYY-TKR-ACC
protocol tcp
add ssl-proxy-list YYY-TKR-ACC
keepalive type none
port 80
ip address 193.X.X.X
type ssl-init
slot 6
active
ssl-proxy-list YYY-TKR-ACC
backend-server 1
backend-server 1 ip address 193.X.X.X
backend-server 1 type initiation
backend-server 1 rsacert YYY-TKR-ACC
backend-server 1 rsakey YYY-TKR-ACC-KEY
backend-server 1 server-ip 193.X.X.X
backend-server 1 cacert YYY-TKR-ACC-CA
backend-server 1 cipher rsa-with-rc4-128-md5
active
