cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4850
Views
3
Helpful
17
Replies

ISE 2.2 integration error with SMS Gateway Clickatell

MICHAEL HORNE
Level 1
Level 1

Hi,

I am trying to integrate ISE 2.2 with the SMS gateway from Clickatell.  Unfortunately I have not had any success. I found some guides here on the community, but they have not helped. I want to set up a 1-way integration via HTTPS GET.

Pasting the required URL into a web browser works fine, but it is not working from the ISE. The problem does not seem to be a URL problem, but a certificate problem.

When I try and send a notification from the Sponsor portal I get a error.

sponsor.PNG

When I manually try to send a test SMS from the Guest account type page I get a more detailed error:

error.PNG

When I take a look at the traffic on the proxy I can see that the Server is sending its certificate back and I can see the serial number of the CA certificate that signed it.

ca cert.PNG

The serial number of the CA certificate that signed the server certificate matches what is in the Trusted Certificate store of the ISE.

Trusted cert.PNG

The next thing I see in my packet trace is the ISE reporting a error back to the server "Certificate Unknown"

wireshark.PNG

If anyone has any idea what might be going wrong, it would be appreciated.

17 Replies 17

Hi,

The certificates I had in the certificate store were not marked for "Trust for authentication within ISE". Once I changed this the error went away!


MAny thanks,

Michael

So, now that you have it working... I'm curious... are you using the older https://api.clickatell.com/rest/message URL, or the newer https://platform.clickatell.com/messages URL?  Would you mind sharing a screenshot of your SMS Gateway config?

In reply 13., Michael showed it's the newer https://platform...