topic Re: SSL Decryption Problem in General Topics

SSL Decryption Problem

diennea — Mon, 25 Mar 2013 14:37:59 GMT

Hi,

I have a problem with some untrusted issuer.

For example Microsoft TechNet site (https://technet.microsoft.com) is blocked from my PA500 with this error:

Certificate Error

Certificate name: technet.microsoft.com

IP Address: 65.52.103.106

Issuer: MSIT Machine Auth CA 2

Status: untrusted

Reason:

I downloaded MSIT Machine Auth CA 2 certificate from microsoft site ( Microsoft Federation Services Certificate Information Page ) and I import it into my certificate but I receive the same error.

Can someone help me?

Thanks

Re: SSL Decryption Problem

mikand — Mon, 25 Mar 2013 21:21:34 GMT

If I remember it correctly from another thread you need to have the full CA-chain (in the file you import to PA device) in case this MSIT cert is an intermediate one.

Re: SSL Decryption Problem

zarina — Mon, 25 Mar 2013 21:25:45 GMT

Did you import the cert "MSIT Machine Auth CA 2" into PAN and mark it as "Trusted Root CA"?

Re: SSL Decryption Problem

diennea — Tue, 26 Mar 2013 10:44:55 GMT

Upload the chain it works

Thanks!