topic Installed a new SSL Certificate but clients are still seeing the in Network Security

Installed a new SSL Certificate but clients are still seeing the old one.

joshscott — Mon, 11 Mar 2019 22:33:50 GMT

I have installed a new SSL certificate on our ASA 5500. I removed the old one, installed the new one. And associated the trustpoints with the interface we use for Web Connect and AnyConnect connections.

They are still seeing the old expired certificates. Users can still log in and authenticate but I would rather them see the correct certificate.

Anybody have any suggestions?

Thanks

Installed a new SSL Certificate but clients are still seeing the

Julio Carvajal — Wed, 22 Feb 2012 19:55:34 GMT

Hello,

If you do show run ssl

Do you see the Rigth certificate ( trustpoint) applied to the right interface?

Julio

Installed a new SSL Certificate but clients are still seeing the

joshscott — Wed, 22 Feb 2012 20:06:12 GMT

Yes the correct trustpoint is shown.

Installed a new SSL Certificate but clients are still seeing the

Julio Carvajal — Wed, 22 Feb 2012 20:15:36 GMT

Hello Josh,

Can you try it from a computer you have not connect before and see if you see any differences.

Regards,

Installed a new SSL Certificate but clients are still seeing the

joshscott — Wed, 22 Feb 2012 20:43:55 GMT

This will take me a little bit of time. I will probably have to set up a virtual to test this with since I have connected with all of my machines at one point in time.

Installed a new SSL Certificate but clients are still seeing the

joshscott — Wed, 22 Feb 2012 20:50:44 GMT

Nevermind I set up a new Linux Virtual a couple of days ago and I have connected with it yet.

Still having the same issue. Web SSL VPN Service is showing the old expired certificate even though it doesn't look to be installed on the ASA anywhere.

Installed a new SSL Certificate but clients are still seeing the

Julio Carvajal — Wed, 22 Feb 2012 21:00:55 GMT

Hello Josh,

If you do a show run crypto ca trustpoint:

Do you see both of them? The old one and new one?

Also do you have any certificate to profile mapping?

Regards,

Installed a new SSL Certificate but clients are still seeing the

joshscott — Wed, 22 Feb 2012 21:27:40 GMT

Running "show run crypto ca trustpoint" does indeed show the old trustpoints. I have no certificate to profile mappings

Installed a new SSL Certificate but clients are still seeing the

joshscott — Wed, 22 Feb 2012 22:16:06 GMT

There must have been something wonky with the certificate install. I removed and then reinstalled it and it is running fine now. Although I have a lot of old trustpoints that are still shown as in use

Installed a new SSL Certificate but clients are still seeing the

Julio Carvajal — Wed, 22 Feb 2012 22:31:11 GMT

So, Please remove those ones from your ASA

No crypto ca trustpoint x.x.x.x

Do you see the actual ( the one active on your ASA)