Forum Discussion

mrichter's avatar
mrichter
Icon for Nimbostratus rankNimbostratus
Aug 05, 2015

APM: X509_verify_cert failed: error #: 20 at depth 0, error message:unable to get local issuer certificate

I'm having an issue with certificates on Macintosh systems generating this error when attempting to use client certification authentication.   I have the proper CA-bundle applied and a similar c...
BIG-IP Access Policy Manager (APM)
security
kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus

Does this shed any clue?

 

security find-identity -p ssl-client -v

 

mrichter's avatar
mrichter
Icon for Nimbostratus rankNimbostratus
Aug 06, 2015
This looks like the issue - for some reason the Edge-client doesn't seem to loop through the certificates and picks the first one in this. I temporarily deleted the first identity certificate and now things are working as expected. Thoughts on the best way to resolve this?