Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The web service plugin supports two authentication methods in the communication between a backend information system and the web service plugin interface:

  1. username/password

  2. TLS certificate.

This article explains how to configure the TLS certificate based authentication (2).

...

The command generates a private key (mykey.pem) and a certificate (mycert.pem).

Prerequisites

Before starting the actual configuration steps, the certificate ID of the backend system’s client certificate must be constructed.

The certificate ID is constructed taking the CN, O and C fields, and combining them with the serial number converted to decimal value:

...

The TLS certificate based authentication can be configured by following the steps below.

  1. Log in to the Access Point admin UI.

  2. Create a new plugin user using the “Certificate” type.

    1. Image Modified
  3. Type in the Plugin User details - including the certificate ID.

    1. Image Modified

  4. Click OK and then Save.

  5. Import the backend information system’s client certificate to the Access Point’s TLS truststore following these instructions.

  6. Send a test request using the

...

  1. client certificate. For example:

    1. Code Block
      curl -E <MY_CERT>.pem --key <MY_KEY>.pem --header "Content-Type: text/xml;charset=UTF-8" --data @<MY_REQUEST_FILE>.xml https://<MY_AP_HOST>:8443/services/backend -v -k

...

Filter by label (Content by label)
page
showLabelsfalse
max5
spacescom.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@416f73b
showSpacefalse
sortmodified
showSpacetypefalsepage
reversetruetype
labelskb-how-to-article
cqllabel = "kb-how-to-article" and type = "page" and space = "HEAKB"labelskb-how-to-article