Troubleshooting Tip: Error 'failed to verify the certificate for self-signed certificate chain' when connecting to FortiGuard

Description

This article describes how to deal with the error 'failed to verify the certificate for self-signed certificate in certificate chain' when it appears in FortiWeb System Events.

Scope

FortiWeb v8.0.x.

Solution

Administrators may notice several errors related to the self-signed certificate in the FortiWeb System Events.

Or an Admin might see the error 'Something is wrong with certificate or certificate revoked, errorno(19)'.

Collect the output of the following commands for further analysis:

diagnose timestamp enable
diagnose debug application sslutil 7
diagnose debug application fgfmd 7
diagnose debug enable

As a workaround, the administrator can modify fortiguard-anycast's value to 'disable' and verify whether the messages disappear.

config system fortiguard
    set fortiguard-anycast disable
end

It is related to bug 1272830 that has been solved in versions 7.6.8 and 8.0.5.