topic Re: SSL certificate renewal failed for SAS Web servers in Administration and Deployment

SSL certificate renewal failed for SAS Web servers

LJalaja — Tue, 15 May 2018 03:09:59 GMT

Greetings,

We are running SAS 9.4 M3 on Linux OS with clustered environment.

We have recently renewed ssl certificate for SAS Web Servers using the below procedure.

1. Placed csr, crt, key files in SASCofig/Web/WebServer/ssl/ path.

2. Edited the file SASConfig/Web/WebServer/conf/extra/httpd-ssl.conf as per the names of the key and certificate.

3. Using the deployment manager from middle tier we have updated CA bundle with root,intermediate certificates.

All the web applications are working fine and there is no error in InstallLogs and Web logs but the certificate is not validated with the new certificate provided as we checked in Web browser.

We are using Webservers with HA Proxy Load Balancer.

Please let me know if you have any ideas or suggestions.

Thank you,

Jalaja

Re: SSL certificate renewal failed for SAS Web servers

nhvdwalt — Tue, 15 May 2018 07:57:46 GMT

Hi @LJalaja

1.) What internet browser are you using ? If Chrome, then you must ensure the CN of the server certificate also appears in the list of SANs for the server certificate

2.) Also, make sure the full CA chain is imported into your Windows certificate store.

3.) Open up each certificate in your CA chain from the Windows certificate store and ensure that every certificate is ok. Maybe the new certificate was signed with a chain of CAs and one of the CA (s) is missing from the certificate store.

4.) You can even import the new server certificate into the Windows certificate store and check that it validates ok

Re: SSL certificate renewal failed for SAS Web servers

LJalaja — Wed, 16 May 2018 03:35:56 GMT

Hi,

Thanks for your response.

We have checked in Chrome browser, the server certificate appears in the list of SANs for the server certificate. The new certificate is not updated for Web server and it is using the old certificated as checked in the browser.

We are using SAS in Linux environment and it is multi user environment.

Thanks & Regards,

Jalaja

Re: SSL certificate renewal failed for SAS Web servers

nhvdwalt — Wed, 16 May 2018 08:38:30 GMT

I'm not quite following the problem....

If you try and access the URL using Chrome, what error do you get ? Have you tried with IE or Firefox perhaps ?