+14Hi All,
I updated SSL certificate as the old one expired.
When I check from the management server, it shows the correct SSL certificate.
When I check from my laptop it shows the old certificate.
NOTE: I am using correct IFS binary version
I tried below,
Any Idea?
Best answer by Ben Monroe
Hi Darshana,
I think it is important to verify whether the client is returning stale results from the cache. Please check the s_client output using OpenSSL from a client PC. You can do so as follows:
openssl s_client -connect <fqdn>:443Replace <fqdn> with the FQDN for your environment. Please verify the validity of the returned results. You can type Q and Enter to exit the connection.
Do you have an proxies between the client and server that may be caching the old certificate? If so please try the above s_client verification from a location where the proxy cannot interfere.
Best regards -- Ben
Hi Darshana,
I think it is important to verify whether the client is returning stale results from the cache. Please check the s_client output using OpenSSL from a client PC. You can do so as follows:
openssl s_client -connect <fqdn>:443Replace <fqdn> with the FQDN for your environment. Please verify the validity of the returned results. You can type Q and Enter to exit the connection.
Do you have an proxies between the client and server that may be caching the old certificate? If so please try the above s_client verification from a location where the proxy cannot interfere.
Best regards -- Ben
+14Hi Darshana,
I think it is important to verify whether the client is returning stale results from the cache. Please check the s_client output using OpenSSL from a client PC. You can do so as follows:
openssl s_client -connect <fqdn>:443Replace <fqdn> with the FQDN for your environment. Please verify the validity of the returned results. You can type Q and Enter to exit the connection.
Do you have an proxies between the client and server that may be caching the old certificate? If so please try the above s_client verification from a location where the proxy cannot interfere.
Best regards -- Ben
It was the proxy. Updated nginx with the new cert files.
Thank you
+14Is there an external proxy with an other cert in front of IFS Cloud?
It was the proxy. Updated nginx with the new cert files.
Thank you
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.