zabbix ssl

[sbardeev]

Hi all!

I'm trying use this manual to setup https/ssl on Apache/httpd

https://www.zabbix.com/documentation/current/en/manual/installation/requirements/best_practices

Certificate issue by Windows CA, but web console show that connection not secure and certificate not vaild.
Edge and Chrome warning me NET:ERR_CERT_COMMON_NAME_INVALID, but CN is absolutely identical to hostname fqdn.
IE show that certificate is trusted and identified by my CA.

I'm tried on nginx too and have same problem.

[Markku]

Does your certificate have a SAN field (Subject Alternative Name)?

Like https://support.f5.com/csp/article/K92194400 says: "... modern browsers require Subject Alternative Name field to be populated along with CN field. If SAN is left empty, old browsers like Internet Explorer 11 will work. But Chrome, Firefox will not accept the certificate if hostname is not present in SAN."

Markku