Certificate Error in Global Protect Portal

Reply
Not applicable

Certificate Error in Global Protect Portal

Hi All,

I'm trying to setup the Globalprotect VPN and have followed the (only partially helpful) GlobalProtect-Configuration-4.1.pdf to create certs and set everything up. When I try to connect to the portal site with my browser I get a certificate error - "Error code: sec_error_bad_signature".

It doesn't matter if I conect to the host name or the IP that I defined in the cert, I still get this error.

Does anyone know what the problem could be. Also, is there a way to actually see the certificates?

Thanks,

Kenton

Highlighted
L0 Member

Re: Certificate Error in Global Protect Portal

Did you import the CA and the client cert to your browser?

I had that issue as well but importing "Installing" the CA and client certs to my browser fixed that issue.

Hope that helps.

L2 Linker

Re: Certificate Error in Global Protect Portal

Please use the FQDN and not the host name or IP address.

With kind regards,

Olivier

Not applicable

Re: Certificate Error in Global Protect Portal

Dear

i also have the same Problem and not yet to figure out.

Not applicable

Re: Certificate Error in Global Protect Portal

Do you mean use the FQDN when creating the certs? At this point my portal doesn't ahve a FQDN.

Not applicable

Re: Certificate Error in Global Protect Portal

Thanks @mbehlok, that helped a bit, now I get a 404 error saying /uro/ was not found on this server. Must be more that I'm missing inthe setup I guess. Any thoughts?

L4 Transporter

Re: Certificate Error in Global Protect Portal

I too am getting this same error.  I followed the document "GlobalProtect Configuration for 4.1" as much as I could.  My Portal/Gateway does not have a FQDN, just an IP address.

Edit: Importing the Global Protect Gateway Cert allows my browser to reach the portal.  BUT, I can not log in, and I get a message on the portal saying "Invalid client certificate".

Not applicable

Re: Certificate Error in Global Protect Portal

I had a similar issue. I would get a certificate malformed error when trying to connect to the portal. I deleted all the certificates and started over. I was using underscores in the name for each certificate, I changed this to hyphens and made sure to fill out all the fields and it seemed to resolve the issue. Not sure why it did however and there is a chance that I had changed something else unknowingly during the process. It’s worth a shot I guess…

Not applicable

Re: Certificate Error in Global Protect Portal

Does anyone succeed in configuring Globalprotect with OS 4.1 ? please help sharing !!!!!

L0 Member

Re: Certificate Error in Global Protect Portal

Ovan,

I actually got it to work, and it seems to work very well, at least once I got the certificates to work.

What can I do to help?  I can post up part of the configuration if that will help, or even some screen shots of the GUI.

Or if you want, get me access to the firewall if its in a lab environment and I can see if I can help out.

my direct email is mbehlok (at) sslmeetings.com

BTW, GP 1.1.2 is out, give that client a try as well as it seems to work better for me.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!