cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
845
Views
5
Helpful
2
Replies

CWMS Certificate Issue : There is a problem with this website's security certificate

Bryan Wulfric
Level 1
Level 1

Dear all,

I've deployed CWMS version 2.5 MR5. There are 3 VM which are webexadmin, webexmedia, and webexirp. The FQDN of those 3 VM is :

- webexadmin = webexadmin.abc.com

- webexmedia = webexmedia.abc.com

- webexirp = webexirp.abc.com

Webex site URL is meeting.abc.com and webex admin URL is meetingadmin.abc.com.

I've signed the certificate to public CA (DigiCert) with the following detail :

Common Name = meetingadmin.abc.com

SAN = meeting.abc.com

             meetingadmin.abc.com

             webexadmin.abc.com

             webexmedia.abc.com

I appended the intermediate certificate with the server certificate in the following order :

-----BEGIN CERTIFICATE--------

intermediate certificate

-----END CERTIFICATE-----------

-----BEGIN CERTIFICATE--------

server certificate

------END CERTIFICATE----------

When i tried to browse to meeting.abc.com or meetingadmin.abc.com using Internet Explorer from internal network, i got a warning "There is a problem with this website's security certificate". But that was not happened when i browsed using Firefox from internal network and from internet.

Even i've tried to append the root certificate too, the certificate order will look like this :

-----BEGIN CERTIFICATE--------

root certificate

-----END CERTIFICATE-----------

-----BEGIN CERTIFICATE--------

intermediate certificate

-----END CERTIFICATE-----------

-----BEGIN CERTIFICATE--------

server certificate

------END CERTIFICATE----------

But the problem is still persist. It will be helpful, if someone have any idea.

Thanks.

2 Replies 2

dpetrovi
Cisco Employee
Cisco Employee

Hi Bryan,

CWMS 2.5 MR5 has a bug related to Intermediate SSL Certs not being sent by CWMS server, hense the browser cannot validate the SSL cert. (CSCuu48189 MR5 no longer sending intermediate certificate)

This is resolved in 2.5 MR5 Patch 1 and later.

I advise you to update your system to 2.5 MR6 and this issue should be resolved for sure.

-Dejan

Hi Dejan,

I will try to upgrade the webex. Thank you for your info.