topic Re: Bad certificate _ inbound ssl inspection in General Topics

Bad certificate _ inbound ssl inspection

Rameshwar — Wed, 11 Jul 2018 16:16:20 GMT

Hi All

we are using 3rd party singed certificate for inbound SSL inspection , once we imported the certificate it is not showing any error and commit is working fine . once we add the certificate to decryption policy it is showing error as bad certificate and commit is failing . The certificate is 3rd part signed CA and its not the CA or subordinate CA this is normal server certificate and the key option after import is showing green check mark that means it has the key and also the certificate is valid . please advise what could be the issue for this bad certificate error ...

Re: Bad certificate _ inbound ssl inspection

BPry — Wed, 11 Jul 2018 21:11:02 GMT

@Rameshwar,

Can you provide the full error message; I would suspect that the firewall doesn't trust the full certificate chain.

Re: Bad certificate _ inbound ssl inspection

Rameshwar — Thu, 12 Jul 2018 05:28:48 GMT

Hi @BPry

the actual error is failed to load: bad certificate.

error loading vsys cfg

failed to handle config_update_start

Re: Bad certificate _ inbound ssl inspection

BPry — Thu, 12 Jul 2018 18:19:05 GMT

@Rameshwar,

What's the signature algorithm that's being used on the cert you are trying to utilize. There's an issue when you attempt to utilize the RSASSA-PSS algorithm to sign certificates.