Intranet SSL Certificate

[Darth Florus]

Hi Pals:

I want to get rid of the secure message of the browers when my Customers use UniGui app inside a intranet.

I use a self-signed certificate, but the browser complains because is not a know certificate authority.

I use then the certificate of my Customer, but it not happy the browser.

The certificate point to sebaotweb.sebaot.com. When use from internet works very fine.

Internally are a transparent redirect on the dns to point sebaotweb.sebaot.com to the server using internal IP address.

On the browser the url is the same if You are using from internet, but inside the net (intranet) the certificate is "insecure".

Anybody knows how i can handle this problem?

Thanks for all and

Best Regards

[Mehmet Emin]

@oflor I am using a single ssl certificate in both internet and intranet server.

I mean in the public internet dns the host name points to an host on internet and in intranet dns points to 192.168.x.xx local LAN.

And I don't get any errors with this type of setup. Make sure that you setup the certificate correctly on intranet server (make sure ssl dlls are newest version)

29 minutes ago, oflor said:

Internally are a transparent redirect on the dns to point sebaotweb.sebaot.com to the server using internal IP address.

I think there is also a possibility that during transparent redirection your proxy or security module may be causing this warning. Because in some setups I saw that proxies install their own ssl as CA root between client and internet in order to decode ssl traffic to analize.

[Darth Florus]

I'm not mention that I'm using UniGUI Windows Service Server.

I hope this is not a problem because of that.

[Mehmet Emin]

I am using both service and stand alone (VCL) there is no difference in SSL certificate handling.

5 hours ago, oflor said:

but inside the net (intranet) the certificate is "insecure".

What is the exact browser message?

[Darth Florus]

The error is SEC_ERROR_UNKNOWN_ISSUER.

What minds that?

[Sherzod]

7 hours ago, oflor said:

The error is SEC_ERROR_UNKNOWN_ISSUER.

https://www.gogetssl.com/wiki/problems/sec_error_unknown_issuer/

[Mehmet Emin]

@oflor I was going to write the possible reasons but @Sherzod's link explains all possible reasons. Must be one of them.