Avoid fingerprint warning after certificate renewal

[Cihat_Bulut]

Hello,

If you don’t want VPN clients to receive warnings every time the server certificate changes, don’t import only the server certificate. Instead, include the root and intermediate certificates within the server certificate itself. You can do this using the command below.

Assume you have one SubCA: 

cat SubCA.crt rootCA.crt >> fullchain.crt 

cpopenssl pkcs12 -export -inkey private.key  -in cert.crt   -certfile fullchain.crt   -name "myCert"   -out mycert.p12

Import this file into the Mobile Portal. The fingerprint shown will correspond to the Root CA.

After this, you won’t see any warnings as long as the Root CA remains the same.