Clients Prompted For Certificate In The Browser

Products

• CA API Gateway

Issue/Introduction

Clients are suddenly being prompted to present a certificate in the browser.   The Client Authentication setting is configured to "Optional" on the listen port.  When changed to "None", the prompt does not appear (but certificate calls fail).

Environment

Release : 10.x 11.x

Component : API GATEWAY

Resolution

For the certificate in the gateway trust store,  uncheck "Verify Hostnames for Outbound SSL connections" on the validation tab. Also uncheck Outbound SSL connections and Signing Client Certificates on the options tab if checked.