Client Authentication

openssl req -newkey rsa:4096 \
-x509 \
-sha256 \
-days 3650 \
-nodes \
-out lars123.crt \
-keyout lars123.key \
-subj ”/C=SE/ST=Stockholm/L=Solna/O=Security/OU=Consultant/CN=lars123”

openssl pkcs12 -export -in lars123.crt -inkey lars123.key -name lars123 -out lars123.p12

openssl x509 -in lars123.crt -text -noout | grep Subject:
Subject: C = SE, ST = Stockholm, L = Solna, O = Security, OU = Consultant, CN = lars123

I imported lars123.p12 into ”Your Certificate” under ”Privacy and Security” in Firefox.

In LOGGER:
I edit the user called lars123. I changed the CN too:
CN=lars123,OU=Consultant,OU=Consultant,L=Solna,ST=Stockholm,C=SE

Under System Admin/Security/SSL Client Authentication, upload lars123.crt.

You do not need to loaded the lars123.crt in Logger Configuration/Data/Certfificates.

I configured ”External Authentication” as ”Client Certificate”. Logger restarted the web process automaticaly.

You can also choose ”Client Certificate AND local password” if you like. Make sure to also reset the password to a known password for the user, if needed.

Now when accessing Logger, it is prompting you to choose one of the local certificated in Firefox. Choose the uploaded one and Logger allow you into Logger.