Support for AIA Fetching technology

Products

• Web Isolation Cloud
• Web Isolation

Issue/Introduction

Can you please tell me if AIA (Authority Information Access) chasing  is supported on the Web Isolation proxy? The question is related to the fact that the user observes a problem when the site does not give the entire chain of certificates.

 

Environment

Release :

Component :

Resolution

The Web isolation proxy does support AIA chasing. In other words it will fetch the intermediate certificate if the server certificate includes the aia extension and the full chain was not sent. This is evident in the following print screen of a packet capture. In pink the server does not send the full chain but says you can get the intermediate certificate at this link (in green)