This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF Active Sync with Clientcertificate authentication

Hi,

I'm trying to setup WAF for exchange active sync with client authentication based on user certificates. I'm getting the following message in the WAF log:

[warn] Proxy client certificate callback: (owa.lalalala.de:443) downstream server wanted client certificate but none are configured

My question is: Wich certificate is missing where?

I have the AD-user-cert (call it a.) on the device, the CA Cert for the user cert (call it b.) - this also signes the exchange servers certs - and the VPN CA from my asg (call it c.). The WAF virtual server uses the san cert of my exchange servers (call it d.) that is signed by the CA Cert (this is b.) that is also imported as verification CA (btw. owa is working with an other 'normal' pc client).

- a. is signed by b.
- d. is signed by b.
- device has a. and b. and should trust d.
- asg has b. and d.

Any help is appreciated :-).

Regards
Manfred

This thread was automatically locked due to age.

Parents

0 Longman over 12 years ago

The only cert I used was a san cert purchased from digicert, installed on the exchange server and enabled for all the relevant services and finally imported into the astaro firewall for use with waf. I would try a dnat rule first to verify that your activesync clients can work with that approach. If they can't then you have a cert issue.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Longman over 12 years ago

The only cert I used was a san cert purchased from digicert, installed on the exchange server and enabled for all the relevant services and finally imported into the astaro firewall for use with waf. I would try a dnat rule first to verify that your activesync clients can work with that approach. If they can't then you have a cert issue.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data