topic Re: Error SSL Mobile Wildcard ISE in Network Access Control

Error SSL Mobile Wildcard ISE

athan1234 — Thu, 30 Nov 2023 07:51:46 GMT

Hello
My Wildcard certificate was renewed. After of this PC, the connections are fine; the mobile device is the issue

Re: Error SSL Mobile Wildcard ISE

ahollifield — Thu, 30 Nov 2023 13:29:29 GMT

Renewed with the proper SAN fields? Wildcard present in the SAN also?

Re: Error SSL Mobile Wildcard ISE

MHM Cisco World — Thu, 30 Nov 2023 14:16:41 GMT

The mobile device which os it run?

MHM

Re: Error SSL Mobile Wildcard ISE

athan1234 — Fri, 01 Dec 2023 11:15:22 GMT

Hello, @ahollifield I appreciate your response.

I generated the certificate via ISE and entered the same data as the previous certificate. I presume that if you have a wildcard certificate, do you also need to enter SAN fields? Nevertheless has SAN this wildcard

I don't get why a wildcar, like *.midominio.com, needs a SAN. If you follow mydomin.com, all entries should be validated.

This is the certificate

ISE SIDE for portal

Mobile this ssl no trust only in mobile

Re: Error SSL Mobile Wildcard ISE

ahollifield — Fri, 01 Dec 2023 12:48:44 GMT

Yes this all seems correct. The wildcard must also have the wildcard in the SAN field. Are you sure the spelling of the domain is the same? Is the mobile device time/date correct? What version of Android? All other devices trust this certificate?

Re: Error SSL Mobile Wildcard ISE

athan1234 — Tue, 12 Dec 2023 08:52:31 GMT

Hi there @ahollifield
I apologize for the delay just to reply me today response.
iPhone It's ok no problem ; the mistake is in the Android mobiles; he attempts to use Android 12 as an example.
I am watching the firs words is bienvenido.xxxxxx.
May be in this case i woukd have to put a SAM bienvenido.xxxxx .
For solve this problem?

Re: Error SSL Mobile Wildcard ISE

athan1234 — Tue, 12 Dec 2023 08:52:53 GMT

Hhey
iPhone It's ok no problem ; the mistake is in the Android mobiles; he attempts to use Android 12 as an example.

Re: Error SSL Mobile Wildcard ISE

athan1234 — Wed, 13 Dec 2023 11:16:02 GMT

Hey any idea ?

Re: Error SSL Mobile Wildcard ISE

ahollifield — Wed, 13 Dec 2023 13:12:42 GMT

My guess is the Digicert/Thawte root/intermediate CAs are not trusted on that model/version of Android. Try a different Android client.

Re: Error SSL Mobile Wildcard ISE

hslai — Fri, 22 Dec 2023 23:48:03 GMT

@athan1234 : Adding to @ahollifield , please check the complete certificate chain and, if needed, take packet capture and use WireShark or the like to verify. And check the root CA against the list of trusted certificates on the Android OS.