Can someone assist me in reviewing my client auth settings?
- I set up tomcat to perform a client auth,
- I have a client certificate and referenced it within the config.json however it appears that the EMS is passing some other certificate other than mine. which appears to be a default certificate from thingworx which is not in the defined config file. The reference keystore only contains my client certificate.
If I try to connect to foundation server with a browser, I am prompted correctly and am able to authenticate to composer.
config.json:
{
"ws_servers": [{
"host": "XXXXXXXX",
"port": 8443
}],
"appKey": "XXXXXX",
"certificates": {
"validate": true,
"client_cert": "/home/pi/ems/microserver/keystore/client.cer",
"cert_chain": [ "/home/pi/ems/microserver/keystore/CA.cer" ],
"key_file": "/home/pi/ems/microserver/keystore/keyenc.pem",
"key_passphrase": "XXXXXX"
},
"http_server": {
"host": "127.0.0.1",
"port": 9080
},
"logger": {
"level": "TRACE"
},
"auto_bind": [{
"name": "RedPi",
"gateway": false
}],
"ws_connection": {
"encryption": "SSL",
"verbose": true,
"msg_timeout": 1000
}
}
This is from wireshark, this is the certificate that is being passed to the server as the client certificate with my request:
(id-at-commonName=MicroServer,id-at-organizationalUnitName=Edge,id-at-organizationName=ThingWorx,id-at-localityName=Exton,id-at-stateOrProvinceName=Pennsylvania,id-at-countryName=US)
