Contents
What is mutual SSL certificate?
Mutual SSL authentication or certificate based mutual authentication refers to two parties authenticating each other through verifying the provided digital certificate so that both parties are assured of the others’ identity. The server presents its certificate to the client.
What is common name in client certificate?
The Common Name (AKA CN) represents the server name protected by the SSL certificate. The certificate is valid only if the request hostname matches the certificate common name. Most web browsers display a warning message when connecting to an address that does not match the common name in the certificate.
How do you create a client certificate for mutual authentication?
Creating a Client Certificate for Mutual Authentication
- Create a backup copy of the server truststore file.
- Generate the client certificate.
- Export the generated client certificate into the file client.
- Add the certificate to the truststore file domain-dir /config/cacerts.jks .
- Restart the Application Server.
What does the common name in SSL mean?
Table of Contents. The Common Name (AKA CN) represents the server name protected by the SSL certificate. The certificate is valid only if the request hostname matches the certificate common name. Most web browsers display a warning message when connecting to an address that does not match the common name in the certificate.
How does client certificate authentication work in SSL?
Client Certificate Authentication is a mutual certificate based authentication, where the client provides its Client Certificate to the Server to prove its identity. This happens as a part of the SSL Handshake (it is optional). What is a client certificate?
When to re-create client certificate for mutual authentication?
If this example is to verify mutual authentication and you receive a runtime error stating that the HTTPS host name is wrong, re-create the client certificate, being sure to use the same host name that you will use when running the example.
What should I know about SSL common name mismatch?
Certificate Common Name mismatch. The Host name of the URL the client application uses to make an API call, does not match the SSL server certificate’s Common Name. This requirement is very often overlooked by API developers and API testers.