FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
btey
Staff
Staff
Article Id 305509
Description

This article provides a solution for the following error when it is encountered in the SMS gateway (HTTPS protocol):

 

'Unable to send a text message: HTTP request failed (url: https://x.x.x.x/, status: 0, res: ). Please check your configuration'.

Scope FortiAuthenticator SMS Gateway HTTPS protocol.
Solution

The error message is as follows:

 

errormsg.PNG

Packet capture is shown as below:

Connection closed by FortiAuthenticator after Change Cipher Spec.

 

packet capture.PNG

 

Resolution:

  1. Obtain the SMS gateway server CA certificate from the respective party. Ensure that this CA certificate is imported into FortiAuthenticator by going to Certificate Management ->Certificate Authorities > Trusted CAs. It is possible to manually import the CA certificate or 'Learn Certificate'.

 

import CA certificate.PNG

 

  1. Ensure the API URL hostname matches the server certificate common name.

 

URL.PNG

  1. Ensure FortiAuthenticator can resolve the URL hostname to an IP address.