topic Re: Strange SSL certificate when connecting to GAiA web portal on 1400 appliance in Spark Firewall (SMB)

Strange SSL certificate when connecting to GAiA web portal on 1400 appliance

TomShanti — Mon, 20 Jan 2020 10:16:21 GMT

Hi community,

when connecting to my GAiA web portal on a 1400 appliance I get this certificate:

Issued to: SSL-Server

Issued by: SSL-Server

Valid until: 01.10.2024

This is neither one of the certificates shown in the Web-UI -> Device -> Installed certificates nor is it the certificated stored in /tmp/flash on the appliance.

Can anyone give me a hint where this certificate comes from ?

Thanks and regards

Thomas

Re: Strange SSL certificate when connecting to GAiA web portal on 1400 appliance

HristoGrigorov — Mon, 20 Jan 2020 10:20:04 GMT

From an intermediate HTTPS inspection device/software such as another gateway or local anti-virus program ?

Re: Strange SSL certificate when connecting to GAiA web portal on 1400 appliance

TomShanti — Tue, 21 Jan 2020 12:27:09 GMT

No I can see the direct request via tcpdump on the 1400 appliance.

Very strange ...

Re: Strange SSL certificate when connecting to GAiA web portal on 1400 appliance

G_W_Albrecht — Tue, 21 Jan 2020 13:19:26 GMT

Find the reason here: sk122192: After rebooting the SMB appliance, Incorrect self-signed certificate is presented for the Web portal instead of the certificate assigned by the admin 8)

Re: Strange SSL certificate when connecting to GAiA web portal on 1400 appliance

TomShanti — Tue, 21 Jan 2020 16:17:13 GMT

Thank you very much - I searched the KB already but didn´t find this one.

Regards Thomas