topic Re: SSL Decrypt Problem with Chrome in General Topics

SSL Decrypt Problem with Chrome

SOC_CSG — Mon, 17 Apr 2017 06:58:51 GMT

Hello all,

We are having some problems with SSL Decrypt with Chrome. When we try to connect to some pages appears certificate error that I attached.

I have PanOS 7.1.8 and only occurred this with Chrome. Know somebody how I can fix this problem ?

Kind Regards

Re: SSL Decrypt Problem with Chrome

bbilut — Mon, 17 Apr 2017 13:02:54 GMT

Do you have your decryption cert installed in the machines trusted root certificate authorities?

The thing I've noticed with Chrome in a recent version update is that if you don't have your decryption cert installed it will not let you bypass the decryption errors to go to a google.com owned site.

Re: SSL Decrypt Problem with Chrome

BPry — Mon, 17 Apr 2017 13:27:55 GMT

@SOC_CSG,

If your decryption cert is SHA1 and you are not actively installing the cert as trusted on your device then it is still going to be giving the same error.

Re: SSL Decrypt Problem with Chrome

SOC_CSG — Tue, 18 Apr 2017 08:39:03 GMT

Hello all,

Yes, we have installed decrypt cert on the machines but the problem persists. Its possible we need to create new certificate (more secure than SHA1) and install it againt on the hosts.

Re: SSL Decrypt Problem with Chrome

Steve27596 — Tue, 18 Apr 2017 14:36:56 GMT

We have this problem as well. Appears to be only on Windows 10 for us. Windows 7 and Chrome work fine with decryption on. If I turn off decryption Chrome starts working. We also tried dropping chrome back to verson 56 and that worked. I will also try recreating the cert for decryption and see what happens.

=Steve

Re: SSL Decrypt Problem with Chrome

Mourik — Wed, 19 Apr 2017 05:26:16 GMT

Hi,

We had the same problem here. Creating a new cert without SHA1 solved the issue.

Elmar