Troubleshooting Tip: FortiWeb is sending all certificates of the CA during the SSL handshake

Description

This article describes an issue where FortiWeb is sending all certificates of the CA during the SSL handshake when client certificate verification is enabled.

Scope

FortiWeb.

Solution

To resolve this issue, follow these steps:

Navigate to Server Objects -> Certificates -> Certificate Verify and enable Publish CA Distinguished Name.

Or via the CLI:

config system certificate verify
    edit "Cert_Verify"
        set ca CA-Groups
        set publish-dn enable
end

For more information on this option, refer to the FortiWeb documentation: Uploading trusted CA certificates.