Comments on: Fortigate HTTPS deep scanning and invalid certificates http://stuff.purdon.ca Linux, Fortinet, Life Tue, 19 Mar 2013 18:50:36 +0000 hourly 1 http://wordpress.org/?v=4.0 By: admin http://stuff.purdon.ca/?page_id=155#comment-25 Tue, 19 Mar 2013 18:50:36 +0000 http://stuff.purdon.ca/?page_id=155#comment-25 Are you testing this with Firefox? Firefox doesn’t use the Windows Certificate store so the AD root certificate needs to be installed in Firefox… IE and Chrome do use the Windows certificate store so if the computer is a domain member then those browsers should automatically trust the certificate.

]]> By: bhamacher http://stuff.purdon.ca/?page_id=155#comment-24 Tue, 19 Mar 2013 17:21:48 +0000 http://stuff.purdon.ca/?page_id=155#comment-24 I was provided your webpage back a Fortinet TAC Representative. I appreciate the information that you have out here. I have followed your steps to stop the invalid certificate error when running HTTPS Deep Scanning.

I am still however having trouble with it. I am receiving an error now that states. “This Certificate cannot be verified up to a trusted certification authority.” The certificate is coming from my AD Server though.

Do you have any thoughts on what I may have done wrong? Or do I need to get a wildcard Cert from a godaddy or someone of that nature?

]]>