GFI Forums: Kerio Control » ssl certificate and https filtering

Home » GFI User Forums » Kerio Control » ssl certificate and https filtering

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

ssl certificate and https filtering [message #138654]

Sun, 04 March 2018 13:44

baby27784
Messages: 8
Registered: March 2018
Location: Iran

hi everyone

I want to filter https traffic and I have done following things:

1-assign certificate from domain Ca to Kerio and users have no certificate error in the browser.
2-create new local Autorithy based on my company info.

my questions are:

a.what are the local Authority roles? issue cert ? to whom? why? why should be published in the domain?

b.how can I filtering https traffic for mobile and wifi users? how can deploy local Autorithy cert to them?

Report message to a moderator

Re: ssl certificate and https filtering [message #138671 is a reply to message #138654]

Mon, 05 March 2018 17:42

Kerio/GFI Brian
Messages: 852
Registered: March 2004
Location: California

The local authority is necessary as part of HTTPS filtering. In order to proxy SSL connections, it has to re-encrypt the data and it can only perform this encryption using a known key which belongs to the local authority. So the public key has to be trusted by local devices if their SSL connections are being proxied. When you enable the feature, users are redirected to s designated page with instructions for installing the certificate.

Brian Carmichael
Instructional Content Architect

Report message to a moderator

Re: ssl certificate and https filtering [message #138825 is a reply to message #138671]

Tue, 20 March 2018 03:43

lambada
Messages: 6
Registered: March 2018
Location: California

Can i use free SSL Let's Encrypt or Cloud Flare

Report message to a moderator

Previous Topic:	Why can not I choose wildcard SSL in Kerio?
Next Topic:	UNABLE TO INSTALL KERIO VPN CLIENT 9.2.4.2223

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Tue Sep 26 04:41:23 CEST 2023

Total time taken to generate the page: 0.06071 seconds