SSL Decrypt Problem with Chrome

[SOC_CSG]

Hello all,

We are having some problems with SSL Decrypt with Chrome. When we try to connect to some pages appears certificate error that I attached.

I have PanOS 7.1.8 and only occurred this with Chrome. Know somebody how I can fix this problem ?

Kind Regards

[bbilut]

Do you have your decryption cert installed in the machines trusted root certificate authorities?

The thing I've noticed with Chrome in a recent version update is that if you don't have your decryption cert installed it will not let you bypass the decryption errors to go to a google.com owned site.

[BPry]

@SOC_CSG,

If your decryption cert is SHA1 and you are not actively installing the cert as trusted on your device then it is still going to be giving the same error.

[SOC_CSG]

Hello all,

Yes, we have installed decrypt cert on the machines but the problem persists. Its possible we need to create new certificate (more secure than SHA1) and install it againt on the hosts.

[Steve27596]

We have this problem as well.  Appears to be only on Windows 10 for us.  Windows 7 and Chrome work fine with decryption on.  If I turn off decryption Chrome starts working.  We also tried dropping chrome back to verson 56 and that worked.  I will also try recreating the cert for decryption and see what happens.

=Steve

[Mourik]

Hi,

We had the same problem here. Creating a new cert without SHA1 solved the issue.

Elmar