Commit error: Non-RSA certificate <certificate name> is not supported to encrypt/decrypt cookie

Commit error: Non-RSA certificate <certificate name> is not supported to encrypt/decrypt cookie

1111
Created On 07/15/22 14:16 PM - Last Modified 04/08/26 10:08 AM


Symptom


Commit fails with error message below.

Details:Non-RSA certificate <certificate name> is not supported to encrypt/decrypt cookie
(Module: gp_broker)
client gp_broker phase 1 failure
Commit failed


Environment




Cause


Using Non-RSA certificate to encrypt and decrypt the cookie for user authentication.

Resolution


  1. To encrypt and decrypt the cookies, use RSA certificate.
  2. The portal and gateways use the RSA encrypt padding scheme PKCS#1 V1.5 to generate the cookie (using the public key of the certificate) and decrypt the cookie (using the private key of the certificate).


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqYtCAK&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language