HP 1820-24G Switch J9980A SSL Configuration error

[shaney]

I am trying to setup a new HP 1820-24G Switch and I am unable to get a self generated SSL certificate to work connecting via https.I have following some documents however still not found a solution yet.

I get the following error wehen browsing to the https link:

Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to https://ipaddress again. If this error persists, it is possible that this site uses an unsupported protocol or cipher suite such as RC4 (link for the details), which is not considered secure. Please contact your site administrator.

Any help would be appreciated.

[shaney]

I managed to resolve this myself by generating a certificate in the swtich software and then download it before comparing it to the certificate I generated using the EBJCA software in our lab. It turnes out the switch firmware doesn't like the following extensions:

X509v3 Key Usage: critical

                Digital Signature, Key Encipherment

            X509v3 Extended Key Usage:

                TLS Web Server Authentication

            X509v3 Subject Alternative Name:

To resolve I exluded the above and generated newone and hey presto it worked.