Skip to main content
germafab
germafab
New Member
August 17, 2017
Solved

SSL inspection & CA trust: how to distrust a preinstalled CA

  • August 17, 2017
  • 1 reply
  • 5597 views

Hi all,

 

Currently all CAs in the TrustedCA list are trusted when doing ssl handshake inspection. Now I would like to remove the trust for certain CAs like "WoSign" and/or others systemwide / for ssl inspection.

 

I'm running FOS 5.6.1 and can't seem to find any option to do this. How can this be done? 

 

Cheers,

germafab

    Best answer by hmtay_FTNT

    Hello germafab,

     

    This can only be done through the CLI. Here's how you do it:

     

    config vpn certificate ca

    edit <name>       E.g. edit WoSign

    set trusted disable

    next

    end

     

    If you then check the Trusted CAs List, the certificates will not be there anymore. Hope this helps!

     

    Homing

    1 reply

    hmtay_FTNT
    Staff
    hmtay_FTNTAnswer
    Staff
    August 17, 2017

    Hello germafab,

     

    This can only be done through the CLI. Here's how you do it:

     

    config vpn certificate ca

    edit <name>       E.g. edit WoSign

    set trusted disable

    next

    end

     

    If you then check the Trusted CAs List, the certificates will not be there anymore. Hope this helps!

     

    Homing

    Terms & ConditionsAccessibility statement