This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

The trust status of this website's certificate could not be securely established.

midnightSun 7 months ago

Good Eve.

Trying to connect to a network switch via https.

Error page : The trust status of this website's certificate could not be securely established.

About this request

URL: https://somePublicIP

Certificate details:
- Valid From: Feb 19 03:51:01 2024 GMT
- Valid To: Feb 18 03:51:01 2025 GMT
- Serial Number: 57:60:17:61:a4:06:e2:5b:92:2b:95:5b:85:5f:62:1d
- Subject: C= , ST= , L= , CN=192.168.0.2, O= , OU=
- Issuer: C= , ST= , L= , CN=192.168.0.2, O= , OU=

Its a self signed cert the device created. I know it works and i'm the only IP that can connect via the other sides firewall rules. It works outside of SFOS.

In SFOS

I've added the public IP to ever place i can think of to allow the connection.

I've created a URL group with the IP and added it to the policy.

I've added it to the Local TLS exclusion list

I've created an web exception

I've created a SSL/TLS inspection rule exemption

What am I missing? At this point id expect SFOS to totally ignore the IP.

An old post talked about adding the devices Cert to SFOS but that would be impossible if you cant connect to it and shouldn't SFOS be skipping its checks?

This thread was automatically locked due to age.

0 midnightSun 7 months ago

Sorry this was supposed to be in the Firewall section. Please move it or delete this post.

echo "           __     __         __         __     __    _______               ";
echo ".--------.|__|.--|  |.-----.|__|.-----.|  |--.|  |_ |     __|.--.--..-----.";
echo "|        ||  ||  _  ||     ||  ||  _  ||     ||   _||__     ||  |  ||     |";
echo "|__|__|__||__||_____||__|__||__||___  ||__|__||____||_______||_____||__|__|";
echo "                                |_____|                                    ";

~~~ I miss Port 17. Remember using telnet to get the Quote of the Day? Maybe I'll set one up for all the port scanners. ~~~