Verify eIDAS client certificate(qwac) on server side

566 Views Asked by At

I try to create java server which could be verificat client qwac certificate (TLS). I load to trustcacerts certificates from all urls from https://ec.europa.eu/tools/lotl/eu-lotl.xml in tags , than via postman try to make request to https to my server (connected pfx of qwac certificate), but get an error: SSL Error: Unable to verify the first certificate. Please help, what I make wrong and how to verify client certificate? Thanks!

1

There are 1 best solutions below

0
On

This is an old question, but maybe my answer will be relevant for someone.

I wrote a script extracting CA certificates from the eIDAS Trust List: https://github.com/fed239/eidas-tsp-certificates-extractor

The extracted certificates are to be put in a trust store used for verification of client certificates.