SSL Certificate is not showing

NTMS2017 · October 12, 2018, 4:00pm

Hi,

On my ubuntu 18.04 I install the nginx and I get the ssl certificate. It worked only 24 hours. Now I am getting bellow error on MacOS 10.13.6 with Safari browser as well as Android phone browser as follows.

Details:

Distributor ID: Ubuntu
Description: Ubuntu 18.04.1 LTS
Release: 18.04
Codename: bionic

nginx version: nginx/1.15.5

echo | openssl s_client -connect cep.capitalbank.com.tr:443 2>/dev/null | openssl x509 -noout -dates
result:
notBefore=Oct 10 06:50:26 2018 GMT
notAfter=Jan 8 06:50:26 2019 GMT

https://cep.capitalbank.com.tr/

certificate issuer is not recognized.

HTTP Strict Transport Security: false
HTTP Public Key Pinning: false

Certificate Chain:

stevenzhu · October 12, 2018, 4:03pm

Hi,

The site's certificate is now not a let's encrypt certificate, but a fortinet one (which is not trusted by browsers and OSs)

Do you have any service with Fortinet?

Thank you

NTMS2017 · October 12, 2018, 4:06pm

I am accessing from home using fortunes client. But this also happened on my Android phone. And yes my machine is front of the Fortinet and I configured to allow 443

NTMS2017 · October 12, 2018, 4:08pm

When I try it in ubuntu Mozilla browser is look like its working and showing the green ssl icon front of my domain name

stevenzhu · October 12, 2018, 4:32pm

Hi,

However, when I was connecting to your server, it’s just the fortinet certificate.

Is it possible that the firewall intercepts the https request?

Thank you

NTMS2017 · October 12, 2018, 4:33pm

I configure yesterday and all day today I work with my application which is counting to my ubuntu machine. Wasn’t any problem

NTMS2017 · October 12, 2018, 4:37pm

I test it now on Asus laptop using win10 edge browser and I am getting DLG_FLAGS_INVALID_CA error. I can only call admin on Monday

NTMS2017 · October 12, 2018, 4:40pm

I call admin guy and there look now

NTMS2017 · October 12, 2018, 4:51pm

Ok its working now. They re-configure ssl inspection and remove the inspection for my domain now. we need to re-configure the firewall on Monday and get the ssl inspection on again for my domain. Do you know how to configure Fortinet with SSL inspection on for Letsencrypt certificate?

NTMS2017 · October 12, 2018, 5:05pm

No, I don’t know how to design Fortinet with SSL review on for Letsencrypt endorsement

system · November 11, 2018, 5:11pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

SSL Certificate is not showing

Details:

Distributor ID: Ubuntu Description: Ubuntu 18.04.1 LTS Release: 18.04 Codename: bionic

nginx version: nginx/1.15.5

Distributor ID: Ubuntu
Description: Ubuntu 18.04.1 LTS
Release: 18.04
Codename: bionic