FortiProxy
FortiProxy provides enterprise-class protection against internet-borne threats and Advanced Web Content Caching
tino_p
Staff
Staff
Article Id 379948
Description

This article describes the issue of ERR_CERT_DATE_INVALID when clients are accessing some specific websites via FortiProxy:

 

cert_error.jpg

When examining the certificate further, it showed that the certificate learned from FortiProxy was already expired:

 

  invalid_date.jpg

 

However, the actual certificate from FortiProxy is still valid:

 

screenshot.png
Scope FortiProxy.
Solution

Running the packet sniffer in FortiProxy, showed that when FortiProxy was communicating with an upstream device (Sophos Firewall) in TLS handshake, the certificate was encrypted in TLS 1.3 packets. So it should be checked further on the Sophos side. 

 

screenshot1.png
Contributors