Skip to main content

Hi All,

 

I updated SSL certificate as the old one expired.

 

When I check from the management server, it shows the correct SSL certificate.

When I check from my laptop it shows the old certificate.

 

NOTE: I am using correct IFS binary version

 

I tried below,

  • Recreated and reinstalled middle tier.
  • Clear all caches in laptop

 

Any Idea?

Hi Darshana,

I think it is important to verify whether the client is returning stale results from the cache. Please check the s_client output using OpenSSL from a client PC. You can do so as follows:

openssl s_client -connect <fqdn>:443

Replace <fqdn> with the FQDN for your environment. Please verify the validity of the returned results. You can type Q and Enter to exit the connection.

Do you have an proxies between the client and server that may be caching the old certificate? If so please try the above s_client verification from a location where the proxy cannot interfere.

 

Best regards -- Ben


Is there an external proxy with an other cert in front of IFS Cloud? 


Hi Darshana,

I think it is important to verify whether the client is returning stale results from the cache. Please check the s_client output using OpenSSL from a client PC. You can do so as follows:

openssl s_client -connect <fqdn>:443

Replace <fqdn> with the FQDN for your environment. Please verify the validity of the returned results. You can type Q and Enter to exit the connection.

Do you have an proxies between the client and server that may be caching the old certificate? If so please try the above s_client verification from a location where the proxy cannot interfere.

 

Best regards -- Ben

It was the proxy. Updated nginx with the new cert files.
Thank you


Is there an external proxy with an other cert in front of IFS Cloud? 

It was the proxy. Updated nginx with the new cert files.
Thank you


Reply