Wildcard certificate problem

D

doneliko

Bit poster
I use 2x trial v11 (1848)

I have alert during opening 2XHTML5Gateway web page:
This certificate cannot be verified up to a trusted certification authority

Cert looks like ok, there is only problem with verification regarding issuer.

To configure i made some changes on my server:
- added key file to private key file option i SSL / TLS config of Secure Client Gateway Properties (2x)
- added my wildcard file to certificate file option i SSL / TLS config of Secure Client Gateway Properties (2x)
- i have also imported all needed CA to Trusted Root CA and Intermediate CA/ Certificates on Local Computer
- added to c$\Program Files (x86)\2X\ApplicationServer\trusted.pem text file all needed information regarding CA

What else should i do to make it work ?

daniel
 
Re: Wilcard certificate problem

Hi thanks for your interest in 2X products.

You should be able to implement any genuine certificate into 2X ApplicationServer, and when the 2X Client connects the secure connection would be applied accordingly. If however you have security level set on the terminal server and a certificate applied, 2X ApplicationServer doesn't have any control over this certificate and the issue would be caused by the Terminal Server itself.
 
Actually that is not true.

2X Clients, unfortunatelly, only supports certificates directly signed by a CA that it trusts. It does not allow you to import Intermediate CA, and as so, it does not support certificates signed by Intermediate CAs (ex.: StartSSL certificates).
So, if your wildcard is signed by an Intermediate CA that is not directly trusted by 2X Client, it will not work. Even if the CA that signed the intermediate is trusted.

Regards.
 
@doneliko: From your description, it seems that you are getting the certificate issue when launching the web page (not during a connection). At that point, it's the browser that is giving you the warning not the 2XHTML5Gateway itself. If this is the case, then you should check your browser settings or ensure that the browser will accept your certificate in its default configuration.
 
You must log in or register to reply here.
Back
Top