Ignition 7.9 SSL Certs


I am trying to install some SSL certs on a 7.9 Ignition Gateway. I followed the config guide that Ignition has and installed my keystore. I then went and replaced the keystore, enabled SSL and restarted the gateway.

Now when I visit http://mygateway:8088 I am automatically redirected to https://mygateway:8043 which is what I expect. The issue that I have is that it pops me up a warning saying “Your connection is not private” with the error down below being “NET::ERR_CERT_COMMON_NAME_INVALID”.

When I click advanced I get a message saying " This server could not prove that it is mygateway; its security certificate does not specify Subject Alternative Names. This may be caused by a misconfiguration or an attacker intercepting your connection." How can I get rid of this message?

The cert comes from an Active Directory Certificate Authority and this computer is part of the domain so it should be trusted.

I think you need to get the hostname into the SAN section of the certificate somehow.

Ignition isn’t really involved at this point - your browser is complaining about the certificate issued by your AD CA.