topic Re: Global Protect certificate error in General Topics

Global Protect certificate error

soporteseguridad — Fri, 16 Dec 2016 09:28:06 GMT

Hi,

We are testing GProtect 2.3.2 version and its not working fine.

Debug GP client shows "WINHTTP CALLBACK_STATUS_FLAG_CERT_CN_INVALID".

The certificate is issued with the Common Name clientvpn.xxx.xxx, and this is the address of the portal.
If instead of the DNS name of the portal, we put the IP address, the client warns that the CN of the certificate does not match, but allows to establish the connection.

how can we solve this problem??

Re: Global Protect certificate error

TranceforLife — Fri, 16 Dec 2016 11:17:04 GMT

Hi,

Think you getting this:

https://live.paloaltonetworks.com/t5/Management-Articles/GlobalProtect-client-doesn-t-trust-GlobalProtect-Portal/ta-p/65915

Thx,

Myky

Re: Global Protect certificate error

soporteseguridad — Tue, 20 Dec 2016 08:41:52 GMT

We were using GProtect version 1.2.2 and it was working fine. We decided to upgrade GProtect to version 2.3.2. We created a new certificate with the same CN in order to solve it, but this is not working 😞

Why is not working???