topic Old certificate showing even after new certificate mapped to the ssl profile in General Topics

Old certificate showing even after new certificate mapped to the ssl profile

FarzanaMustafa — Tue, 05 Mar 2019 21:10:19 GMT

Hello,

We are using Software Version - 8.0.8, Global Protect Agent - 4.0.4

One user is able to connect the VPN through portal but when accessed the URL from the internet still seeing the old certificate after new certificated mapped.

We tried to reinstall the GlobalProtect client by accessing the GlobalProtect portal so the client pulls the latest certificate but no luck.

Any idea how to fix this?

Thanks in advance.

Re: Old certificate showing even after new certificate mapped to the ssl profile

BPry — Wed, 06 Mar 2019 14:06:51 GMT

@FarzanaMustafa,

This sounds like a client browser issue more than anything else. If the user accesses the portal via a different browser (such as Firefox/Chrome) do they still receive the old certificate?

Re: Old certificate showing even after new certificate mapped to the ssl profile

FarzanaMustafa — Thu, 07 Mar 2019 23:46:09 GMT

@BPry yes it is happening in all browsers.

Re: Old certificate showing even after new certificate mapped to the ssl profile

gwesson — Fri, 08 Mar 2019 01:06:14 GMT

If you're not interested in root cause or a real solution and just want to get past this issue, you can try a commit force from CLI or if you want to be even more aggressive you can restart the management plane (debug software restart process management-server).

8.0.8 is about a year old and is also 8 maintenance revisions back. There aren't any clear fixes in the release notes that account for this specific behavior, there are several medium- and high-priority vulnerabilities fixed since then it may be worth upgrading first to see if the issue is resolved. Doing the upgrade also does a system restart and a commit, so you can get up to a more current version and try the debugging steps above at the same time if you're able to upgrade.