cancel
Showing results for 
Search instead for 
Did you mean: 
bornheim
Level 7

"301 Moved Permanently" and certificate verification

Hi,

when accessing this site: http://www.kordoba.de/

there is a redirect "301 Moved Permanently" to https://www.fis-kordoba.de/

The certificate for the latter checks ok, but Web Gateway thinks otherwise:

The certificate verification failed due to a common name mismatch.                  Host: www.kordoba.de

      Common name: www.fis-kordoba.de

      Alternative subject names: regex(www\.fis-kordoba\.de), regex(fis-kordoba\.de)

The location bar shows https://www.kordoba.de/ (redirected to https://, but not redirected too www.fis-kordoba.de) which indeed does not verify.

Kind regards,

Robert

0 Kudos
4 Replies
asabban
Level 17

Re: "301 Moved Permanently" and certificate verification

Hi Robert,

which version of MWG are you using? I just tried to access with my lab MWG and access works as expected.

Best,

Andre

0 Kudos
bornheim
Level 7

Re: "301 Moved Permanently" and certificate verification

Hi Andre,

I'm using 7.3.2.10.0 (17592).

Can I provide anything helping to analyze this?

Kind regards,

Robert

0 Kudos
asabban
Level 17

Re: "301 Moved Permanently" and certificate verification

Hey Robert,

I just tested this with a default MWG 7.3.2.10.0 but access works fine. As you mentioned you go to www.kordoba.de and a 301 pointing to https://www.fis-kordoba.de comes back. The browser follows this redirect - all good. MWG also accepts the certificate.

I am a little confused as you see a certificate that has regular expressions as "Alternative subject names". When I go there the certificate shows

DNS-Name=www.fis-kordoba.de

DNS-Name=fis-kordoba.de

so all good. I have no real explanation for this. Maybe you end up at a different server. Is that web site an external web site for you or ir your company operating the web site so that there is maybe an internal path for your MWG to get there?

Are there any rules that do redirects when you try to access the website?

Probably it is required to look into rule engine traces or packet captures. In that case a support case would be more beneficial I think.

Best,

Andre

0 Kudos
bornheim
Level 7

Re: "301 Moved Permanently" and certificate verification

Hi Andre,

this must have to do with something else within my companys network: I tried it through a proxy which does not use Web Gateway und run into the same problem.

I found some wierd stuff in the DNS answers and will talk to those guys.

Sorry for the nuisance.

Kind regards,

Robert

0 Kudos