SSL CA Certificate Installation not working

OK, never mind. The issue is my own ignorance. I was getting the error when I used https://172.16.165.16, but I do not get the error if I use http://172.16.16.16. If I turn on decrypt and scan HTTPS and go to sites like Facebook that use https, I do not get a certificate error.

So how does one get rid of the error if you connect to the web GUI for XG using https? Or does it just not work that way?

Thanks 

I get the same error after following the document. When I access the admin portal at https://x.x.x.x:4444 I get this even though the CA has been added to the local computer. same issue with Chrome & IE.

Is there something I've missed ?

Paul,

the problem is that the CN (Common Name) issued inside the Certificate must match the url you are trying to reach.

In order to avoid the error you should generate a certificate with the right CN and use the value entered into CN to access the Firewall, User Portal, etc...

From the screen, also you did not import the CA correctly.

I advise you to upgrade to v16, where XG allows you to set hostname. Once the hostname reflects your needs (FQDN for example) you can generate the right certificate.

Hope this help!

Hi lferrara,

My XG v16 has same issue. and i can't generate a Certification with right CN. 

Is it possible to generate a SSL Certification on the XG? 

If so, Can you guide me how can i generate a Certification with right CN?

Thanks, 

You have to regenerate CA under Certificates > Certificates Authorities > Default CA and then regenerate the Certificate (Appliance Certificate SSL) on the Certificate TAB.

Thank you soooooooooooo much lferrara.

It works!!

Hi Luk,

I have a similar issue , the certificate seems to work on my laptop, but how i can distribute the certificate to mobile devices which are connected to Sophos via Ubiquiti AP

Below is the message i used to get on laptop, but resolved when i imported certificate from Sophos ,but its mobile devices are still having the issue 

Appreciate your assistance

Thanks

Raj

Hi Luk,

I have a similar issue , the certificate seems to work on my laptop, but how i can distribute the certificate to mobile devices which are connected to Sophos via Ubiquiti AP

Below is the message i used to get on laptop, but resolved when i imported certificate from Sophos ,but its mobile devices are still having the issue 

Appreciate your assistance

Thanks

Raj