Skip to main content
lhsit
New Member
May 26, 2020
Question

Getting Certificate errors after upgrade to 6.2.x

  • May 26, 2020
  • 1 reply
  • 5327 views

Hi All,

we recently upgrade the firmware to 6.2.2, then to 6.2.4.  Now, we are getting random certificate errors when trying to visit websites.  It doesn't happen all the time, just every now and then, and for totally different sites.  However, it's always the same, with an "UNKNOWN ISSUER" error on the certificate, which appears to have been "issued" by Fortinet.

 

We don't do DPI, we only have "certificate inspection" on our web filtering rules.

The error is highlighted in the attached image.  Even though the cert is for itunes.apple.com it appears to have been issued by fortinet.

 

Any help would be appreciated.

Regards,

Chris.

    1 reply

    emnoc
    New Member
    May 26, 2020

    Did you "diag debug flow" when accessing that website and what does the output show ? And how is you web filter rules for that site and what is allowed or not allowed?

     

    Also open a new browser in incognito does it do the same error?

     

    Ken Felix

     

    lhsit
    lhsitAuthor
    New Member
    May 26, 2020

    Hi Ken,

    thanks for the response.  Unfortunately the errors are random and they come and go.  I will try the incognito window idea to see if that reduces the incidence of errors.

    Cheers,

    Chris.

    laf
    New Member
    July 29, 2020

    lhsit wrote:

    Hi Ken,

    thanks for the response.  Unfortunately the errors are random and they come and go.  I will try the incognito window idea to see if that reduces the incidence of errors.

    Cheers,

    Chris.

    Did you find anything in the meantime?