Captive Portal SSL Certificate Error

cancel
Showing results for 
Search instead for 
Did you mean: 

Captive Portal SSL Certificate Error

L4 Transporter

We're running 5.0.10 with Captive Portal.

We have an SSL certificate installed for *.domain.com and have several internal DNS entries that point something.domain.com to various physical interfaces on the Palo Alto.

We recently revoked and rekeyed our wildcard cert and since importing and replacing all instances with the new certificate, on some machines (not all), when getting to the captive portal there is a "Don't recognise the CA" error thrown up by Internet Explorer with Chrome simply saying "No Connection".

In the PAN GUI the certificate shows as being issued by AlphSSL, which it was.  On machines with the error I can get to the management interface which uses the same certificate and I don't get any kind of error.

I'm a little confused - the only thing I can imagine is if I need to somehow get the intermediate onto the PAN, but that would seem unlikely since the management interface works perfectly using the same certificate.

1 ACCEPTED SOLUTION

Accepted Solutions

L4 Transporter

You would have to ensure that the entire certificate chain (in your case the intermediate) that may have been used to sign the server certificate is imported onto the PAN firewall.

Under the following tab:

Network>>Global Protect>>Portal>> Client Config where it says "Root CA" - please include the requisite certificates to complete the certificate chain if they are in the PAN firewall, you can use the drop down.

HTH

View solution in original post

2 REPLIES 2

L4 Transporter

You would have to ensure that the entire certificate chain (in your case the intermediate) that may have been used to sign the server certificate is imported onto the PAN firewall.

Under the following tab:

Network>>Global Protect>>Portal>> Client Config where it says "Root CA" - please include the requisite certificates to complete the certificate chain if they are in the PAN firewall, you can use the drop down.

HTH

Thanks, looks like importing with the intermediate appended fixed it Smiley Happy

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!