Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
Question What version of X.509 certificates are supported (V1 or V3)? Answer Juniper Networks supports both versions of X.509 certificates. However, you must use V3 if you want to use the SubjectAlternativeName extension field for a non-DN (distinguished name) Internet Key Exchange (IKE) ID type (for example, IP address, e-mail address, or fully qualified domain name [FQDN])
Junos OS follows the PKI profile described in RFC3280 and supports: Installation of end-entity (EE) or CA certificate Encode, including the X.509 or PKCS7, DER or PEM Compatibility with X.509 v3 and handling of extensions defined in RFC3280. For more information, see Understanding Certificates and PKI #JunosOS #RFC2459 #RFC3280 #X.509 #PKCS7 #pki #FAQ
Does Juniper Networks provide a CA with its products? What version of X.509 certificates are supported (V1 or V3)?
Basically, the 128T will parse the X.509 certificate from the TLS Handshake to figure out which applications are being accessed
See matching posts in thread - Hi Paul, Please check if these help: https://kb....
This server restricts access to clients that have a valid X.509 certificate. As part of the purchase or evaluation of 128 Technology’s software, you will receive a client certificate in PEM format from 128T’s sales operations team
See matching posts in thread - Supports multiple, concurrent NETCONF and csh se...
See matching posts in thread - So just check OSPF database for self-created LSA...