Sign in

RENEWED THE CERTIFICATE. NOW ANDROID PHONES CAN'T CONNECT TO THE WEBMAIL????

Solvedcertificateshttpstls6 replies · 219 views · started
Reply
Accepted solution by Emeka Fontaine — hmmm rule out the clock and name: an expired leaf, a cilent with a wrong system date, or a hostname not in teh SAN list all look similar.…
  1. Lars Alvarez
    @larsa699

    help!! integration partner says calls from Android phones to our webmail fail with a certificate error:

    When i open the URL in my browser its perfectly fine. Theyre blaming us, were blaming them. Whos right??

    i dont wanna tell them to disable certificate verification, that feels like teh wrong answer. But i also need proof of whether teh problem is on our side. How do i check this properly? im about to throw this thing out the window lol

    2
  2. Greta Park
    @gpark

    hmmmm quick q what does openssl s_client -showcerts list: one certificate, or the leaf plus intermediate??

    0 4 helpful
  4. Malik A.
    @tiny_trace

    for a private/internal CA, distribute the root to clients properly (Group Policy, MDM, or teh apps trust store) instead of disabling verification. turning off verification just hides the problem and opens u to interception.

    5 0 helpful
  5. Emeka Fontaine
    @subnet_rider-1zj
    Accepted solution

    hmmm rule out the clock and name: an expired leaf, a cilent with a wrong system date, or a hostname not in teh SAN list all look similar. openssl x509 -in cert.pem -noout -dates -ext subjectAltName checks the cert itself.

    0 11 helpful

Reply to this topic

Sign in or create an account to reply.