The TLS client (JUNOS routing platform) needs a copy of the certificate that was used to sign the SAE certificate so that it can verify the SAE certificate. To install the SAE certificate on the JUNOS routing platform:
- [edit security certificates certificate-authority]
- security{
-
- certificates{
-
- certificate-authority SAECert{
- file /var/db/certs/cert.pem;
- }
- }
- }
- system{
-
- services{
-
- service-deployment{
-
- servers {
-
- server-address port port-number{
-
- security-options {
- tls;
- }
- }
- }
- }
- }
- }