CLE cant reach SSPR forgotten password site due to self signed certificate issue

Marlon Rojas 2 months ago

Friend, We are configure CLE client from a Windows Workstation. This is a Non Production enviroment, then we are using a Self Signed Certificate.

We already import the CA Certificate in the Windows Box and the Application certificate.

But we get an error when we try to get the forgotten password URL.

Error From CLE

From Edge we dont get error on the windows box

Something we miss with certificate configuration?

Thanks!

Top Replies

0 Geoffrey Carman 2 months ago

Does the self signed cert have a Subject Alternate name extension, with all the possible values f the URL? So in your case tha iam1 but also perhaps iam1.yourdomain.edu and perhaps the IP address as well? This is a normal validation step to consider.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Marlon Rojas 2 months ago in reply to Geoffrey Carman

Hello Geoffrey, thanks for your answer, this is a standalone instalation, one server, and the certificate is the default certificate build durring instalation. No domain only iam1 and as Subject Alternate have the IP Address.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
Verified Answer

+1 Geoffrey Carman 2 months ago in reply to Marlon Rojas

Try to connect to the IP Address then and see if you do not get the error. If so, remint the cert (Sign it with your eDir CA if you like) and add the Subject Alternate Name.

There is a Java config switch that turns this checking off, but I do not think the CLE is Java based.
Cancel
Vote Up +2 Vote Down

Sign in to reply

Reject Answer

Cancel
0 Marlon Rojas 1 month ago in reply to Geoffrey Carman

Geoffrey Thanks for your replay. In fact, the problem is that default instalation certificate do not fill the Subject Alternative Name, specialy DNS. Actually browser do not trust on CN Name, Trust in information that is in SAN. Look like Netiq Documentation it is nos update as we need.

I fix the issue, but it is no posible fix the issue following the Netiq Documentation.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel

Menu

Identity Manager User Discussions

CLE cant reach SSPR forgotten password site due to self signed certificate issue

Top Replies

Verified Answer

Resources