Client Certificate Authentication Is Shutdown - How to activate?

Options
MDK101
MDK101 Member Posts: 5 ✭
edited September 2022 in PubSub+ Event Broker #1

user@broker-vm:/var/opt/solace/jail/logs$ tail event.log 

2022-09-21T09:55:08.842+00:00 <local3.notice> broker-defaultshard-primary-vm event: VPN: VPN_BRIDGING_LINK_REJECTED: vapnonprod_vpn - Message VPN (1) vapnonprod_vpn Bridge edge_defaultshard.to.core_b from VPN vapnonprod_vpn rejected: Service Unavailable

2022-09-21T09:55:11.846+00:00 <local3.notice> broker-defaultshard-primary-vm event: VPN: VPN_BRIDGING_LINK_REJECTED: vapnonprod_vpn - Message VPN (1) vapnonprod_vpn Bridge edge_defaultshard.to.core_b from VPN vapnonprod_vpn rejected: Client Certificate Authentication Is Shutdown

How to activate this?


enterprise-10.0.1.60

OS Version: Ubuntu 22.04

Best Answer

  • MDK101
    MDK101 Member Posts: 5 ✭
    edited October 2022 #2 Answer ✓
    Options

    Solution:

    cli:

    home

    ena

    conf

    message-vpn <vpn-name>

    authentication

    basic shutdown

    client-certificate

    allow-api-provided-username

    no shutdown

    exit

    exit

    no bridging ssl server-certificate-validation validate-server-name

    home

Answers

  • marc
    marc Member, Administrator, Moderator, Employee Posts: 923 admin
    #3
    Options

    Hi @MDK101,

    I hope you already solved your issue as it seems this slipped through the cracks. That said, for anyone else that comes across this the steps necessary to use client cert authentication are laid out in the docs: https://docs.solace.com/Security/Configuring-Client-Authentication.htm#Client-Cert

    Hope that helps!

  • MDK101
    MDK101 Member Posts: 5 ✭
    #4
    Options

    Thank you. We found and used that hints but was not able to solve our problem completely for now. We're still trying to fix that... I will post it here, if we have an final solution.

  • MDK101
    MDK101 Member Posts: 5 ✭
    edited October 2022 #5 Answer ✓
    Options

    Solution:

    cli:

    home

    ena

    conf

    message-vpn <vpn-name>

    authentication

    basic shutdown

    client-certificate

    allow-api-provided-username

    no shutdown

    exit

    exit

    no bridging ssl server-certificate-validation validate-server-name

    home

Categories

This Month's Leaders

This Week's Leaders