Certificate cannot be authenticated

[lovelin9]

Hi, everyone. I'm trying to open ssl with bolt and https and both has been set 'client_auth=require', but it has error when I use https connecting.

[maciej_krzywdaa]

lovelin9:

Hi, everyone. I'm trying to open ssl with bolt and https and both has been set 'client_auth=require', but it has error when I use https connecting.

But If set other than 'require' all work well? for example as 'NONE' ?

[lovelin9]

Hi, @maciej.krzywdaa
Everything gonna be fine when i choose 'client_auth=none'.
conf:

Bolt connector

dbms.connector.bolt.enabled=true
dbms.connector.bolt.tls_level=required
dbms.connector.bolt.listen_address=0.0.0.0:7687

HTTP Connector. There can be zero or one HTTP connectors.

dbms.connector.http.enabled=true
dbms.connector.http.listen_address=0.0.0.0:7474

Bolt SSL configuration

dbms.ssl.policy.bolt.enabled=true
dbms.ssl.policy.bolt.base_directory=certificates/bolt
dbms.ssl.policy.bolt.private_key=server.key
dbms.ssl.policy.bolt.public_certificate=server.crt
dbms.ssl.policy.bolt.trusted_dir=trusted
dbms.ssl.policy.bolt.revoked_dir=revoked
dbms.ssl.policy.bolt.private_key_password=neo4j
dbms.ssl.policy.bolt.client_auth=require

Https SSL configuration

dbms.ssl.policy.https.enabled=true
dbms.ssl.policy.https.base_directory=certificates/https
dbms.ssl.policy.https.private_key=server.key
dbms.ssl.policy.https.public_certificate=server.crt
dbms.ssl.policy.https.trusted_dir=trusted
dbms.ssl.policy.https.revoked_dir=revoked
dbms.ssl.policy.https.private_key_password=neo4j
dbms.ssl.policy.https.client_auth=require