cancel
Showing results for 
Search instead for 
Did you mean: 

Certificate Warning

hendry_
Occasional Contributor

Certificate Warning

i alway get certificate warning when open ssl vpn, as user and admin, how to resolve this problem, please see my attachment.

7 REPLIES 7
kalagesan_
Super Contributor

Re: Certificate Warning

Hi,

This first error message means that the device certificate for the SA is not recognised as valid.
It is either a self signed certificate or the the most common issue is that the Issuer certificate is not trusted by the SA.
Also the client machine does not know the CA since its not a well known or approved CA.

Tthe second error message cause is the SA device certficate is generated for a hostname and you might be trying
to access the SA admin/user UI through Ip address.


The recommedned configuration to overcome the issue is:

1. Raise a CSR and get the device certfiicate from a thirdparty CA, also get the complete CA path certfiicates if there is any intermediate CA's.

2. you can add "Trust" by obtaining a the issuing CA certificate for the SA and import the issunig CA certificate (or certificate chain if there are subordinates) under:
Configuration > Certificates > Trusted Servers CA.

Hope this resolves your query.


NOTE:
Please mark this post as 'accepted solution' if this answers your question that way it might help others as well, a kudo would be a bonus thanks!!

hendry_
Occasional Contributor

Re: Certificate Warning

hi how to raise the CSR?

how to get device certificate from thirdparty ca?

what is intermediate ca?

zanyterp_
Respected Contributor

Re: Certificate Warning

how do you connect: ip or name? if you use ip, it will always show the name mismatch.

if you are using name but the certificate is self-signed, or from some other certificate authority, you will receive that portion of the failure

hendry_
Occasional Contributor

Re: Certificate Warning

we use name when connect.. please help

zanyterp_
Respected Contributor

Re: Certificate Warning

right now you are connecting to a different server name AND it is not trusted.

the latter will happen if you are using a self-signed cert.

can you send me the site you are connecting to OR open a JTAC case to move forward?

hendry_
Occasional Contributor

Re: Certificate Warning

i have solved this issue by generated cert from www.selfsigncertificate.com and installed to juniper sa.

zanyterp_
Respected Contributor

Re: Certificate Warning

thank you for the update and information; glad to hear it is working for you