Authentication using only certificate

wenhede
wenhede Member Posts: 2

Hi All,

Is it possible to authenticate using only certificate? without clientUsername and clientPassword, i tested below setup but got 401 authentication error. Any help is appreciated, thank you.

solace:
  java:
    host: tcps://192.168.133.64:55443
    msgVpn: default
    connectRetries: -1
    reconnectRetries: -1
    apiProperties:
       SSL_VALIDATE_CERTIFICATE: true
       SSL_TRUST_STORE:
       SSL_TRUST_STORE_PASSWORD:

Answers

  • amackenzie
    amackenzie Member, Employee Posts: 270 Solace Employee

    Have you set up client certificate authentication on the broker message vpn?

    https://docs.solace.com/Overviews/Client-Authentication-Overview.htm#Client-Certificate

    Are you using a self-managed broker or a PubSub+ Cloud instance?

  • Ragnar
    Ragnar Member, Employee Posts: 67 Solace Employee

    You have configured the trust-store so that the API will validate the broker certificate.

    You also need to set the AUTHENTICATION_SCHEME to AUTHENTICATION_SCHEME_CLIENT_CERTIFICATE and provide a key-store (SSL_KEY_STORE) that contains you client-certificate.