WebUI: "website sent back unusual and incorrect credentials" - MS Edge

Luce321

Hello,

when accessing the web interface of the Pfsense, MS Edge will not let me proceed and displays the following message:

***Your connection isn't private
Attackers might be trying to steal your information from 10.10.10.1 (for example, passwords, messages, or credit cards).
NET::ERR_CERT_INVALID
10.10.10.1 uses encryption to protect your information. When Microsoft Edge tried to connect to 10.10.10.1 this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be 10.10.10.1, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Edge stopped the connection before any data was exchanged.

You can't visit 10.10.10.1 right now because the website sent scrambled credentials that Microsoft Edge can't process. Network errors and attacks are usually temporary, so this page will probably work later.***

However, when using Google Chrome, it will let me access the interface by simple clicking the "proceed anyway" option (which is not an option when using Edge).

How can I resolve this? I checked the self signed certificate and it is still valid.

Thanks!

SteveITS

@luce321 I have seen that on self signed certs in Chrome...there is a trick there of typing "thisisunsafe" into the browser tab (no prompt, just type). Not sure that works on Edge.
https://support.google.com/chrome/thread/10551759/net-err-cert-invalid-website-sent-scrambled-credentials-self-signed-certificate?hl=en

Is it possible you had previously allowed/bypassed the cert in Chrome?

Firefox doesn't have that warning, it just shows the invalid cert message.

stephenw10

Mmm, I thought I'd seen this hitting Edge specifically but I can't see it now.....

However whenever we've seen this is the past it's been solved by regenerating a new web cert. So, for example, from the CLI: pfSsh.php playback generateguicert

Steve

Luce321

@stephenw10 said in WebUI: "website sent back unusual and incorrect credentials" - MS Edge:

pfSsh.php playback generateguicert

I did run the renew task via the web interface > System/ Certificate Manager / Certificates.
But that did not resolve it.
Does running the command via CLI do anything different?

stephenw10

The only other thing it does is restart the webgui to use the new cert.