Authentication using only certificate

wenhede

Hi All,

Is it possible to authenticate using only certificate? without clientUsername and clientPassword, i tested below setup but got 401 authentication error. Any help is appreciated, thank you.

solace:
  java:
    host: tcps://192.168.133.64:55443
    msgVpn: default
    connectRetries: -1
    reconnectRetries: -1
    apiProperties:
       SSL_VALIDATE_CERTIFICATE: true
       SSL_TRUST_STORE:
       SSL_TRUST_STORE_PASSWORD:

amackenzie

Have you set up client certificate authentication on the broker message vpn?

https://docs.solace.com/Overviews/Client-Authentication-Overview.htm#Client-Certificate

Are you using a self-managed broker or a PubSub+ Cloud instance?

Ragnar

You have configured the trust-store so that the API will validate the broker certificate.

You also need to set the AUTHENTICATION_SCHEME to AUTHENTICATION_SCHEME_CLIENT_CERTIFICATE and provide a key-store (SSL_KEY_STORE) that contains you client-certificate.