topic Re: Wildcard certificate not trusted in SASE and Remote Access

Wildcard certificate not trusted

RickyDan — Sun, 17 Jul 2022 19:25:56 GMT

I uploaded a DigiCert wildcard certificate for *.domain.com via Gateway Properties > Mobile Access > Portal Settings. I configured a VPN site using vpn.domain.com as the server name but I still get a certificate not trusted error while creating the site. The details window said that the certificate is for *.domain.com while the site is for vpn.domain.com.

Are wildcard certs supported for remote access VPN? What do I need to do?

Re: Wildcard certificate not trusted

the_rock — Sun, 17 Jul 2022 21:48:49 GMT

Im pretty positive that wildcard certs are indeed supported. I think one of my customers had this exact issue before, so will try comb through my notes tomorrow and see how we fixed it.

Re: Wildcard certificate not trusted

RickyDan — Mon, 18 Jul 2022 12:15:17 GMT

Ok thanks. Awaiting your update.

Re: Wildcard certificate not trusted

the_rock — Mon, 18 Jul 2022 12:37:13 GMT

Would you mind send a screenshot? I just want to confirm it was exact same issue I had as well.

Re: Wildcard certificate not trusted

RickyDan — Mon, 18 Jul 2022 12:43:19 GMT

Re: Wildcard certificate not trusted

the_rock — Mon, 18 Jul 2022 12:46:16 GMT

Definitely not the same issue, their problem was that something was wrong with the cert, once they got the right one, all worked fine. Anyway, here is what I find a bit odd...why does it show connecting to *.abc.com, rather than say vpn.abc.com? That makes no sense...what are people entering when creating a site?

Re: Wildcard certificate not trusted

RickyDan — Mon, 18 Jul 2022 12:51:52 GMT

I created the VPN site with vpn.domain.com and the wildcard cert is uploaded in the Mobile Access portal settings.

Re: Wildcard certificate not trusted

Ruan_Kotze — Mon, 18 Jul 2022 13:01:40 GMT

Yes this is a known issue - wildcards are supported but you will get this warning on the 1st connection. I recall previous discussions on CheckMates where this was also highlighted. In my opinion the warning should not be thrown.

Re: Wildcard certificate not trusted

the_rock — Mon, 18 Jul 2022 13:07:42 GMT

Thats good to know, because I dont recall seeing that before on first connection. I know thats been like forever for regular RA vpn, but dont remember seeing it when using wildcard cert for mobile access. Maybe its just me getting old-ER : - )

Re: Wildcard certificate not trusted

RickyDan — Mon, 18 Jul 2022 13:12:41 GMT

Hey, thanks. This means it makes no difference leaving it as the self-signed certificate since the warning still shows when creating the site.

Re: Wildcard certificate not trusted

JanVC — Mon, 18 Jul 2022 13:49:55 GMT

see sk118454