Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a UCCX script which places REST calls to an HTTPS server. The certificate on the HTTPS server changes frequently. I am wondering what my options are, other than manually uploading the new Tomcat-Trust certificate each time it changes.
1) Is it...
I have some new 2802i APs I am trying to associate to a 2802 Mobility Express controller. ME controller is running 8.10.151.0. New APs have been converted to ME, now running 8.10.196.0.
AP is trying to associate with controller, but continually loopi...
After upgrading from 9.12 to 9.14(3), my ASA is not sending DHCP Discover packets out the interface configured. I see repeated attempts on "interface 2" (whatever that is) in the dhcpc debugs, but per packet captures on the interface, they are not ac...
Update to this - per Igor's recommendation, I pulled the certs from a packet capture, as opposed to getting them from the browser, and sure enough, they were different (and missing). I uploaded the missing intermediate CA cert and that fixed the prob...
Igor,
I downloaded the chain via web browser, just navigating to the API URL and grabbing the certificate from Firefox. I will do a packet capture and see what I can see.
TAC is pointing to documentation saying the "entire chain" must be uploaded, which I agree defeats part of the purpose of PKI to begin with.
When I attempt the REST call with only the intermediate/root certs trusted, I get the following response: "ja...
Hi Roger,
Unfortunately not. Per TAC: "UCCX requires the entire certificate chain (including the endpoint certificate) to be uploaded to the tomcat-trust keystore because the Tomcat keystore does not contain root certificates by default. Uploading on...