Forum Discussion

mikegray_198028's avatar
mikegray_198028
Icon for Cirrus rankCirrus
Oct 11, 2016

certificate signature failure

Hello, Any idea about the below error, when we enable client authentication on particular client ssl profile, we are facing this error but the same bundle is working with other profiles warning ...
application delivery
BIG-IP
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 11, 2016

As Anthony asked, what TMOS version are you on?

From the command line, if you type:

tmp --clientciphers 'DEFAULT:ECDHE_ECDSA'

do you see SHA-256 anywhere in the resulting list?

You may also want to check the certificate against the bundle manually. If you have access to the cert, try this:

openssl verify -verbose -CAfile [cert-bundle.pem] [client-cert.crt]