topic Re: Cannot set new certificate to portal in General Topics

Cannot set new certificate to portal

bsanders — Wed, 11 Dec 2013 15:51:22 GMT

Hello all,

Because of a domain name change, I created a new CA certificate on the PA500 which is our portal. I set this certificate as server certificate in the Portal settings. I committed, restarted the web-server and sslvpn processes.

But the new portal website still has the old certificate. How can I make the new certificate active on the portal?

Regards,

Stephan van der Plas

Re: Cannot set new certificate to portal

Retired Member — Wed, 11 Dec 2013 16:12:23 GMT

are you sure you did not access the page from browser cache ?

Re: Cannot set new certificate to portal

Phoenix — Wed, 11 Dec 2013 17:52:30 GMT

Hello bsanders,

Have you also verified that the Gateway configuration for GP also has the change made for the certificate if you are using same server certificate for portal and gateway.

Thanks

Re: Cannot set new certificate to portal

gwesson — Wed, 11 Dec 2013 17:57:38 GMT

If you have openssl installed (or you install it), you can check the cert by running:

openssl s_client -connect www.example.com:443

Just change the site to your portal address. It'll pull down the certificate and show you the common name.

Hope this helps,

Greg

Re: Cannot set new certificate to portal

_slv_ — Wed, 11 Dec 2013 18:52:18 GMT

Or You can use onlie tool http://www.sslshopper.com/ssl-checker.html

Regards

SLawek