topic Failed to determine issuer in General Topics

Failed to determine issuer

Jack_Howells — Wed, 29 Jun 2016 13:30:54 GMT

Hi guys,

I have a certificate that I need renewing as it's expired, but I am seeing "failed to determine issuer" when attempting to do this.

The certificate is a self-signed certificate, but it wasn't generated on the Palo, but rather an external CA. Do I need to remove this certifiate and renew it on the server I generated it from, or should I be able to renew it on the Palo? I believe that the CA must revoke the certificate, but this means they have to renew it as well, or can you renew it on the Palo using OCSP?

Cheers

Jack

Re: Failed to determine issuer

pankaku — Wed, 29 Jun 2016 16:05:06 GMT

Try importing the Root ca public cert on firewall and then try. If that fails then you have to renew it on server and then import it on firewall.

Re: Failed to determine issuer

Jack_Howells — Wed, 29 Jun 2016 16:21:23 GMT

Hi Pankaj,

That is what was done intially to get the error message.