BookmarkSubscribeRSS Feed
LJalaja
Fluorite | Level 6

Greetings,

 

We are running SAS 9.4 M3 on Linux OS with clustered environment.

 

We have recently renewed ssl certificate for SAS Web Servers using the below procedure.

 

1. Placed csr, crt, key files in SASCofig/Web/WebServer/ssl/ path.

2. Edited the file SASConfig/Web/WebServer/conf/extra/httpd-ssl.conf as per the names of the key and certificate.

3. Using the deployment manager from middle tier we have updated CA bundle with root,intermediate certificates.

 

All the web applications are working fine and there is no error in InstallLogs and Web logs but the certificate is not validated with the new certificate provided as we checked in Web browser.

 

We are using Webservers with HA Proxy Load Balancer.

 

Please let me know if you have any ideas or suggestions.
 
Thank you,
Jalaja
3 REPLIES 3
nhvdwalt
Barite | Level 11

Hi @LJalaja

 

1.) What internet browser are you using ? If Chrome, then you must ensure the CN of the server certificate also appears in the list of SANs for the server certificate

2.) Also, make sure the full CA chain is imported into your Windows certificate store.

3.) Open up each certificate in your CA chain from the Windows certificate store and ensure that every certificate is ok. Maybe the new certificate was signed with a chain of CAs and one of the CA (s) is missing from the certificate store.

4.) You can even import the new server certificate into the Windows certificate store and check that it validates ok

LJalaja
Fluorite | Level 6

Hi,

 

Thanks for your response.

 

We have checked in Chrome browser, the server certificate  appears in the list of SANs for the server certificate. The new certificate is not updated for Web server and it is using the old certificated as checked in the browser. 

 

We are using SAS in Linux environment and it is multi user environment. 

 

Thanks & Regards,

Jalaja

nhvdwalt
Barite | Level 11

I'm not quite following the problem....

 

If you try and access the URL using Chrome, what error do you get ? Have you tried with IE or Firefox perhaps ?

suga badge.PNGThe SAS Users Group for Administrators (SUGA) is open to all SAS administrators and architects who install, update, manage or maintain a SAS deployment. 

Join SUGA 

CLI in SAS Viya

Learn how to install the SAS Viya CLI and a few commands you may find useful in this video by SAS’ Darrell Barton.

Find more tutorials on the SAS Users YouTube channel.

Discussion stats
  • 3 replies
  • 1550 views
  • 0 likes
  • 2 in conversation