Test the SSL/TLS configuration

This section describes how to test the configuration for the browser SPNEGO authentication over SSL.

  1. On a machine connected to your Kerberos realm (AXWAY.COM), start the browser you want to test.
  2. Enter the URL of API Gateway (https://gateway.axway.com:8081/gw-service-to-back-end).

When you start a new session, the browser might show some security alerts. Once the security alerts have been handled, the back-end Kerberos service should send a confirmation on a successful authentication. For more information, see Internet Explorer security alerts and Firefox security alerts.

Once the security alerts have been handled, API Gateway sends a response after authenticating the Kerberos user and passing the request to the back-end service.

The Traffic Monitor tab on the API Gateway Manager (https://localhost:8090) is an excellent place to view and troubleshoot the message flows. For more details, see Monitor services in API Gateway Manager in the API Gateway Administrator Guide.

For list of other use cases covered in this guide, see Kerberos use cases.

Internet Explorer security alerts

When you start a new HTTPS session to API Gateway, Internet Explorer might show a security alert on the security certificate.

If you want to view the certificate details, click View Certificate. To proceed, click Yes.

To avoid the security alerts, you can import API Gateway's SSL certificate to the trusted certificate store in the browser:

  1. In Internet Explorer, click Tools > Internet Options.
  2. On the Content tab, click the Certificates....
  3. Import the certificate, and close the dialog window.

Firefox security alerts

When you start a new HTTPS session to the API Gateway, Firefox may show a security alert for an untrusted connection.

If the security alert is displayed, follow these steps:

  1. Click I Understand the Risks.
  2. Click Add Exception > Get Certificate, and import the certificate.
  3. Click Close.
  4. Click Confirm Security Exception.

To avoid the security alerts, you can import API Gateway's SSL certificate to the trusted certificate store in the browser:

  1. Open Firefox, and select Tools > Options > Advanced.
  2. On the Certificates tab, click View Certificates.
  3. Import the SSL certificate, and close the dialog window.

Related Links