Solved

SSL site can't be accssed inside corp firewall

Posted on 2012-03-28
4
376 Views
Last Modified: 2012-04-27
Hi Team,

We have a customer who are trying to access their site (ex: https://wiki.abc.com) inside corp firewall and received "security certificate error". The same site will be accessible outside of the firewall.

The complete error is below:

"There's a problem with this website's security certification

The security certificate presented by this web site has expired or not yet valid

Security certificate problem may indicate an attempt you fool you or intercept any data you sent to the server
We recommend that you close this web page and do not continue to this website
->click here to close
-> continue to this website(not recommended)"

Can you suggest how we can troubleshoot and fix this issue

thanks
0
Comment
Question by:luser9999
  • 2
4 Comments
 
LVL 8

Assisted Solution

by:Shmoid
Shmoid earned 250 total points
ID: 37780326
Check the system clock on the client and the firewall.
0
 
LVL 3

Assisted Solution

by:WebF00L
WebF00L earned 250 total points
ID: 37780600
Check what time stamps the Certificate is saying that it is valid.
Then check time settings on the client and the firewall (and the webserver).

What FW is it? (Dose it have any SSL proxying feature so that it dose any magic with the SSL stream?)

//WebFooL Untangle.com Evangelist
0
 

Accepted Solution

by:
luser9999 earned 0 total points
ID: 37879457
will check it....
0
 

Author Closing Comment

by:luser9999
ID: 37901243
will check it
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now