Hello all, I'm looking for guidance on proper cert validation for use with the ISE API.
I have valid certificates on all ISE nodes signed by our internal CA, but whenever I'm making API calls, they will only work if I specify -k/--insecure with curl.
Using the -v flag, I see the following error when sending a request:
* NSS error -8102 (SEC_ERROR_INADEQUATE_KEY_USAGE)
curl: (60) Certificate key usage inadequate for attempted operation.
CN and request url do match. I'm not sure what else would need to be present in my certificate.