Hi,
we are using R80.40 with enabled HTTPS Inspection. Everything for normal users is working fine but we have issues with command line tool because they are unable to validate the certificate. I know that on some libraries etc. we have to manually trust the certificate itself but the issue we are facing is related to the revocation list. Here is an example from a simple curl:
I noticed that the certificates that the gateways create doesn't include any CRL or OCSP information as you can see here:
The certificate that is on the gateways itself however includes a CRL which might be the reason we don't any issues with normal browsers:
I haven't found any information or SK that is applicable here. Maybe some of you have any idea on how to solve that.
| User | Count |
|---|---|
| 13 | |
| 11 | |
| 8 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 3 | |
| 3 | |
| 3 |
Thu 02 May 2024 @ 04:00 PM (CEST)
CheckMates Live DACH - Keine Kompromisse - Sicheres SD-WANThu 02 May 2024 @ 05:00 PM (CEST)
SASE Masters: Deploying Harmony SASE for a 6,000-Strong Workforce in a Single Weekend
