Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » SSL Certificate
  •  
etieseler

Messages: 129
Karma: 10
Send a private message to this user
I am running Kerio Connect 9.2.3 on Redhat 6.8.

I am trying to get a signed certificate installed and working.

I have created the request, submitted the CSR, and received the signed cert. I imported the signed CA and made it the default certificate. It has the little green check and every thing looks good however my browsers still shows that it is using the self signed certificate. Do I need to restart the Kerio-Connect service for it to use the new cert? In the documentation that I read it did not mention this being necessary (Unless I missed it).

Thanks for the help.

[Updated on: Fri, 16 June 2017 20:04]

  •  
Bud Durland

Messages: 381
Karma: 40
Send a private message to this user
Perhaps a server restart is required?
  •  
etieseler

Messages: 129
Karma: 10
Send a private message to this user
I was hoping to avoid that. I will try to get a maintenance window this weekend to reboot it.
  •  
Brian Carmichael (Kerio)

Messages: 680
Karma: 69
Send a private message to this user
You don't need to restart. In this article http://manuals.gfi.com/en/kerio/connect/content/server-confi guration/ssl-certificates/configuring-ssl-certificates-in-ke rio-connect-1132.html
It describes the order of how certificates are selected. Normally it should select signed certificates first, unless the names don't match. If you are willing to share the hostname it could make it easier to troubleshoot.

Brian Carmichael
Senior Technical Marketing Engineer | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
etieseler

Messages: 129
Karma: 10
Send a private message to this user
Ah, that must be the issue then. This trusted cert is a wild card cert and the expired self-signed certificate is the FQDN of the server. I have 2 self signed certs that are expired. Should I just delete those so the only cert that exists is the wild card?
  •  
Brian Carmichael (Kerio)

Messages: 680
Karma: 69
Send a private message to this user
Yes. You may want to export them first just to be safe.

Brian Carmichael
Senior Technical Marketing Engineer | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
Previous Topic: Cannot open your default e-mail folders. MAPI was unable to load the information service KOFMSP.DLL.
Next Topic: [BUG] No Antivirus Update
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Jun 22 14:00:27 CEST 2017

Total time taken to generate the page: 0.00430 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.