Forum Discussion

wixxyl_98682's avatar
wixxyl_98682
Icon for Nimbostratus rankNimbostratus
Aug 06, 2013

S/Mime issue on Mac's?

Dev,

 

 

I'm seeing an issue where clients that have multiple S/Mime certs associated with iCloud I think, are being asked to provide a certificate and they're having to accept a security exception. I'm not fully clear on the details, but of course the F5 is being blamed. I'm looking under the SSL Client profile settings and the default for client authentication is for the F5 to request a client certificate. This was the setup inherited from the default SSL profile, so I left it at that. It sounds a lot like what my users are seeing, can anyone attest to what that setting should be? Is it causing my issue, or is there something else I need to look at? Please let me know what you guys think, I'm thinking on this, ignore is the setting I'm needing but I'm unsure what these settings are even doing...

 

1 Reply

  • I'm surprised that setting is enabled in the default profile, I'm sure it's set to Ignore by default so it looks like someone has modified one of the default profiles (not good form, a custom is always preferred). Regardless (and if it's not too late) if you are sure that you have no need to request a client certificate (and verify it's identity) then I'd say it's safe to change the setting to Ignore. In this case it is the F5 that's to blame here but only because a default profile setting has been changed.

     

    BTW I'd suggest you play it safe and only set it to Ignore on the custom profile. Until you better understand things it's safer to leave the default one as is.