GFI Forums: Kerio Connect » SSL Certificate

Home » GFI User Forums » Kerio Connect » SSL Certificate

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

SSL Certificate [message #135813]

Fri, 16 June 2017 20:03

etieseler
Messages: 97
Registered: April 2008

I am running Kerio Connect 9.2.3 on Redhat 6.8.

I am trying to get a signed certificate installed and working.

I have created the request, submitted the CSR, and received the signed cert. I imported the signed CA and made it the default certificate. It has the little green check and every thing looks good however my browsers still shows that it is using the self signed certificate. Do I need to restart the Kerio-Connect service for it to use the new cert? In the documentation that I read it did not mention this being necessary (Unless I missed it).

Thanks for the help.

[Updated on: Fri, 16 June 2017 20:04]

Report message to a moderator

Re: SSL Certificate [message #135814 is a reply to message #135813]

Fri, 16 June 2017 20:21

Bud Durland
Messages: 586
Registered: December 2013
Location: Plattsburgh, NY

Perhaps a server restart is required?

Report message to a moderator

Re: SSL Certificate [message #135815 is a reply to message #135814]

Fri, 16 June 2017 23:14

etieseler
Messages: 97
Registered: April 2008

I was hoping to avoid that. I will try to get a maintenance window this weekend to reboot it.

Report message to a moderator

Re: SSL Certificate [message #135817 is a reply to message #135815]

Fri, 16 June 2017 23:44

Kerio/GFI Brian
Messages: 852
Registered: March 2004
Location: California

You don't need to restart. In this article http://manuals.gfi.com/en/kerio/connect/content/server-confi guration/ssl-certificates/configuring-ssl-certificates-in-ke rio-connect-1132.html
It describes the order of how certificates are selected. Normally it should select signed certificates first, unless the names don't match. If you are willing to share the hostname it could make it easier to troubleshoot.

Brian Carmichael
Instructional Content Architect

Report message to a moderator

Re: SSL Certificate [message #135818 is a reply to message #135817]

Sat, 17 June 2017 00:32

etieseler
Messages: 97
Registered: April 2008

Ah, that must be the issue then. This trusted cert is a wild card cert and the expired self-signed certificate is the FQDN of the server. I have 2 self signed certs that are expired. Should I just delete those so the only cert that exists is the wild card?

Report message to a moderator

Re: SSL Certificate [message #135828 is a reply to message #135813]

Sat, 17 June 2017 20:19

Kerio/GFI Brian
Messages: 852
Registered: March 2004
Location: California

Yes. You may want to export them first just to be safe.

Brian Carmichael
Instructional Content Architect

Report message to a moderator

Previous Topic:	[BUG] Task Due Date Time Travels Backwards by 1 Day
Next Topic:	Archive Issue

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Mon Mar 20 20:36:11 CET 2023

Total time taken to generate the page: 0.02336 seconds