Good afternoon everyone,
We’re seeing an odd issue with several Dell iDRACs (Protocol Dell iDRAC 1.0.1.3) where they don’t appear to honor the “Skip SSL/TLS cert” checkbox. Even though it’s enabled, Stream Viewer shows:
<- <span class="hljs-number">12</span>:<span class="hljs-number">17</span>:<span class="hljs-number">32</span> – GET https:<span class="hljs-comment">//10.x.x.x:443/redfish/v1/</span>
<span class="hljs-punctuation">-></span> <span class="hljs-number">12</span>:<span class="hljs-number">17</span>:<span class="hljs-number">47</span> – Error : <span class="hljs-number">12175</span>. [ERROR_WINHTTP_SECURE_FAILURE]
<span class="hljs-punctuation">-></span> <span class="hljs-number">12</span>:<span class="hljs-number">17</span>:<span class="hljs-number">47</span> – Get <span class="hljs-keyword">for</span> <span class="hljs-title class_">httpContentGetConfirmLogin</span> had error : Error : <span class="hljs-number">12175</span>. [ERROR_WINHTTP_SECURE_FAILURE]
However, if we run curl -k https://10.x.x.x/redfish/v1/, it connects without any certificate errors. Our iDRAC BIOS is 1.3.6, which we can’t upgrade, so it’s strange that curl can skip the cert but Stream Viewer can’t.
So far I’ve:
-
Re-created the element
-
Restarted the element
-
Toggled the SSL checkbox (on → save → off → save)
Nothing’s worked yet. Does anyone have any other ideas? Thanks in advance!
Hi Johannes,
DataMiner does not ignore all invalid certificates.
The following page has a list of in which cases DataMiner will ignore the invalid certificate, when that checkbox is enabled:
I'd start by checking what the issue is with the certificate (e.g. using curl without the -k flag or opening that URL in a browser of your liking).
If the issue with the certificate is indeed not one of those listed in the provided URL, then enabling or disabling the checkbox won't have any influence.
Let me know if this explains the behavior you're seeing.
Kind regards,