This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Certificate has expired

When trying to log in to the web interface for managing the Astaro Firewall, Internet explorer displays the following warning:

"There is a problem with this website's security certificate."

Investgation reveals that the expiry date for the certificate is 2001 hence the error.

I have re-generated the certificate several times yet still get the same error after re-installing the certificate.

What can I do to resolve this?

Running Astaro ASG 120 Appliance Version 7.511

This thread was automatically locked due to age.

Parents

0 Scott_Klassen over 14 years ago

Would restoring a backup taken before doing the reset restore all the other settings - interfaces, rules, users, etc?
Yes it would, but it will also restore certificates. In v8.200 a new feature was added to strip certificates and other information individual to a system:

Backup File Stripping ("Templates")

When creating a configuration backup in WebAdmin you can now specify to strip all host specific data and/or
admin contact information. This makes it easier to use the backup as a sort of cookie-cutter template to install
to another machine.

This solves the problem that full configuration backups are really only suitable to install on the same machine or
a machine that is a direct replacement for the previous, mainly since the certificates/CAs will be identical on
both machines.

host specific data includes:

Hostname -including configuration for things like SNMP, dyndns, User Portal etc.
Unique IDs for the system – as found in HA, OSPF etc.
Static IPs -in interface configuration
Generated CAs and certificates – WebAdmin, Proxies, VPNs, etc.
License file

You will be asked to do a new basic setup after installing such a backup on a system; this will regenerate the
missing information

Are you regenerating the certificate at the place shown in the first attached screenshot?

Make certain that the time and date are correct on your Astaro. See the second screenshot.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Scott_Klassen over 14 years ago

Would restoring a backup taken before doing the reset restore all the other settings - interfaces, rules, users, etc?
Yes it would, but it will also restore certificates. In v8.200 a new feature was added to strip certificates and other information individual to a system:

Backup File Stripping ("Templates")

When creating a configuration backup in WebAdmin you can now specify to strip all host specific data and/or
admin contact information. This makes it easier to use the backup as a sort of cookie-cutter template to install
to another machine.

This solves the problem that full configuration backups are really only suitable to install on the same machine or
a machine that is a direct replacement for the previous, mainly since the certificates/CAs will be identical on
both machines.

host specific data includes:

Hostname -including configuration for things like SNMP, dyndns, User Portal etc.
Unique IDs for the system – as found in HA, OSPF etc.
Static IPs -in interface configuration
Generated CAs and certificates – WebAdmin, Proxies, VPNs, etc.
License file

You will be asked to do a new basic setup after installing such a backup on a system; this will regenerate the
missing information

Are you regenerating the certificate at the place shown in the first attached screenshot?

Make certain that the time and date are correct on your Astaro. See the second screenshot.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data