I wanted to know how often does the sophos utm security certificates update? Been getting weird errors after installing one they are showing it has expired like 3 years ago.
I'm wondering if you even have the proxy CA cert installed. When connecting through the Astaro, in safari navigate to http://passthrough.fw-notify.net/cacert.pem. Install this cert.
It is installed in Firefox. But why is Google chorme still having problems with the security cert? Also sometimes sophos will not update with the HTTPS scanning enabled to how can I fix that?
Here is a copy of what is going on in Google chrome. With HTTPS traffic scan enabled.
I guess this is because chrome has it's own internal list of *server* certs for well-known SSL sites (like google.com) and alerts if the browser got a different one from the server. That's the case with SSL scanning because the proxy generates a cert for each SSL site you surf to, signed with the proxy CA cert.
Any way to fix this so I could benefit form HTTPS protection as well? It is aslo causing windows to fail when checking form updates posted the error code above. WindowsUpdate_80240440.
Does anyone got a working cert they could possibly post along with configuration?
Well how does your windows updates work. Do you have it set to also bypass SSL filtering and HTTPS? Because with HTTPS/SSL scanning enabled for me windows updates FAIL. to check
Certificate management can be very different between OSs, browsers, and even individual apps.
Chrome, like IE, uses the Windows Cert store, unlike Firefox, which stores it's own. Do this (Based on v9 WebAdmin, if using v8 you should be able to figure it out) if this is a windows client:
1) In WebAdmin, download the CA Cert at Web Protection>>Web Filtering>>HTTPS CAs Tab. 2) On your Windows Machine, run mmc.exe, File>>Add/Remove Snap-ins. Add the Certificates snap-in. When prompted, choose Computer Account, then Local Computer. Click OK to access the snap-in itself. 3) Expand Certificates (Local Computer). Expand Trusted Root Certification Authorities and right-click on the certificates "folder">>All Tasks>>Import.... Now import the CA certificate.
What this will get you is that Chrome, IE, and any applications that abide by the windows cert store, will trust this cert for any users that log onto this machine. If this is for a business, the cert can be deployed like this through Group Policy.
