Forum Discussion

michalf_360460's avatar
michalf_360460
Icon for Nimbostratus rankNimbostratus
May 04, 2018

SSL connection fail: basic constraints check failed: this is not a CA certificate

Hi guys, I have a problem with https connection via F5: (MY SERVER/ APP) ---https request----> F5 (irule which copy auth info to header) ------http request---> another app Ive created keystore (...
BIG-IP
security
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
May 04, 2018

As per error, it seems you need to install cert n root cert at Oracle/soa application filestore. Please do the debug at server side n get the exact location and install certificate and bounce service.. Hope issue will solve.

 

  • michalf_360460's avatar
    michalf_360460
    Icon for Nimbostratus rankNimbostratus
    May 04, 2018

    I dont understand how can I install cert/root cert at Oracle app filestore. I`ve already created keystore on my app using keytool. I think the problem is not trusting F5 to my configuration. Am I right?

    I generated only keystore (

    keytool -genkey -alias tomcat -keyalg RSA -keystore /keystore-location
-storepass password
    ) I didnt create Certificate Request and send it to CA

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    May 04, 2018

    You need to push cert to Oracle/SOA 

    keystore-client.jks
    violet & issue will solve. Its not the issue of F5 configuration. Issue exist with Backend server..

  • michalf_360460's avatar
    michalf_360460
    Icon for Nimbostratus rankNimbostratus
    May 04, 2018
    You need to push cert to Oracle/SOA

    Which cert do you mean? cert from F5?

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    May 04, 2018

    What ever cert you are applying on F5 same to be applied on application level.

     

  • michalf_360460's avatar
    michalf_360460
    Icon for Nimbostratus rankNimbostratus
    May 04, 2018

    I have properties file in my application level and keystore-client.jks is pushed into my spring application in every start. It is tested without F5 and works OK. I have no idea why it doesnt work via F5