Certify the web DST Root CA X3 EXPIRED

[Karl Petrow]

We are unable to connect noVnc web socket secure using a developers mac computer to the new certificate after certify the webs DST Root CA X3; it was working prior to the Expired DST. It shows it is using the proper certificate but the connection does not work. Any ideas? We need a server side solution if at all possible.

We generated the cert using the certify the web desktop application. We then export .pfx from IIS and use SSL Converter to convert pkcs#12 to PEM. The .key and .crt files are then used for wss connection to NoVNC webviewer. This method works on MacOSMojave(an older dev machine) but is not working on BigSur latest release.

[Samuel Mannehed]

On Sat, 2 Oct 2021 05:41:25 -0700 (PDT)
Karl Petrow <kpe...@carlsonsw.com> wrote:

> We are unable to connect noVnc web socket secure using a developers

> mac computer to the new certificate after certify the webs *DST Root
> CA X3*; it was working prior to the Expired DST. It shows it is using

> the proper certificate but the connection does not work. Any ideas?
> We need a server side solution if at all possible.
>
> We generated the cert using the certify the web desktop application.
> We then export .pfx from IIS and use SSL Converter

> <https://decoder.link/converter/> to convert pkcs#12 to PEM. The .key

> and .crt files are then used for wss connection to NoVNC webviewer.
> This method works on MacOSMojave(an older dev machine) but is not
> working on BigSur latest release.
>

Are you getting any errors? I'd primarily check the browser console on
the BigSur machine.

--
Samuel Mannehed Software Development
Cendio AB https://cendio.com
Teknikringen 8 https://twitter.com/ThinLinc
583 30 Linköping https://facebook.com/ThinLinc
Phone: +46 13 214 600

[Karl Petrow]

we are just getting websocket disconnected.... Is there a publicly hosted example we could use to test on macs? 

exact error on macs

Failed when connecting: Connection closed (code: 1006)

Karl

[Pierre Ossman]

On 05/10/2021 19:37, Karl Petrow wrote:
> we are just getting websocket disconnected.... Is there a publicly hosted
> example we could use to test on macs?
>
> exact error on macs
> Failed when connecting: Connection closed (code: 1006)
>

There should be more than that. Have you checked that there aren't any
filters active for the console? I think it hides things by default.

Regards
--
Pierre Ossman Software Development

Cendio AB https://cendio.com
Teknikringen 8 https://twitter.com/ThinLinc
583 30 Linköping https://facebook.com/ThinLinc

Phone: +46-13-214600

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?