Troubleshooting HTTPS Web interface

Problem: SafeQ client - Windows cannot validate certificate

Windows client does not work with invalid HTTPS certificate. It displays following error message:

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
win-client-unable-to-open.jpg

Solution:

Verify that certificate is valid in browser. This certificate must be issued to server address, must have valid CA and valid timestamp. Otherwise it will be evaluated as invalid.

It is possible to use following steps to import self-signed certificate:

1

Open Internet Explorer and open HTTPS URL of SafeQ server. In case of default installation it will be: https://<safeq_server_ip>/. Internet Explorer will display security warning.

Click Continue to this website.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
internet-explorer-invalid-certificate.JPG

2

Internet Explorer will display SafeQ web. Certificate is not valid.

Click red Certificate Error button.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
intenet-explorer-certificate-button.JPG

3

Click View certificates.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
internet-explorer-view-certificate.JPG

4

Certificate should be issued to server IP.

Click Install Certificate... button.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
internet-explorer-certificate-detail.JPG

5

Click Next button, when Certificate Import Wizard are displayed.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
certificate-import-wizard.JPG

6

Select Place all certificates in following store and click Browse button.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
certificate-import-destination.JPG

7

Select Trusted Root Certification Authorities and click OK button.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
import-certificate-trusted-root.JPG

8

If Certificate Authorities is selected click Next button.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
certificate-wizard-selected-target.JPG

9

Click Finish button to complete Certificate Import.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
certificate-import-final.JPG

10

You'll see security warning. Just click Yes button.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
certificate-security-warning.JPG

11

An information about successful certificate import will be displayed.

images/plugins/servlet/confluence/placeholder/unknown-attachment.png
certificate-import-success.JPG

 

Problem: SafeQ client - Mac OS and invalid certificate

1

Mac client works with HTTPS and invalid certificate, but it will display warning about invalid certificate.

Click Continue button to display UI.

images/download/attachments/21955721/Screen_Shot_2013-01-02_at_8.12.16_AM.png

2

Click Show Certificate to display information about certificate.

It is possible to add certificate to trusted certificates, but warning about invalid certificate will be displayed also next time when user log to his Mac OS machine.

images/download/attachments/21955721/Screen_Shot_2013-01-02_at_8.15.15_AM.png