cancel
Showing results for 
Search instead for 
Did you mean: 
feickholt
Level 10

SSL / Cert question

We've installed SLL Scanner on MWG 7.5

If we try to connect https://www.wikipedia.de we found

that ssl.server.certificatchain.ContinasExpiredCa is true....

I don't know why?

This is the chain:

www.wikipedia.de

Subjectwww.wikipedia.de
Valid from 16/Jul/2015 to 16/Jul/2017
IssuerAlphaSSL CA - SHA256 - G2
SubjectAlphaSSL CA - SHA256 - G2
Valid from 20/Feb/2014 to 20/Feb/2024
IssuerGlobalSign Root CA
SubjectGlobalSign Root CA
Valid from 01/Sep/1998 to 28/Jan/2028
IssuerGlobalSign Root CA

All Certs are valid?

Did I miss something?

FRANK

0 Kudos
5 Replies
eelsasser
Level 15

Re: SSL / Cert question

That's odd. I don't see that behaviour on my 7.5.2.2.

Capture.png

0 Kudos
feickholt
Level 10

Re: SSL / Cert question

Strange we have several sites with the same behaviour: here with 1300ccm.de

ssl.PNG

0 Kudos
McAfee Employee

Re: SSL / Cert question

Hi Frank,

Are you still using the on-box CAs which are outdated?

I'd suggest getting onto the subscribed list.

This could happen if you have the onbox list first and the subscribed list second.

Best Regards,

Jon

0 Kudos
feickholt
Level 10

Re: SSL / Cert question

How do I configure this?

0 Kudos
feickholt
Level 10

Re: SSL / Cert question

I got it.. Thanks!

0 Kudos