JNCIE-SEC

Practice session

An SRX is configured for SSL forward proxy to inspect HTTPS traffic. A client is accessing a site (bank.example.com) where the server's certificate uses certificate pinning. The SRX re-signs the certificate with its CA certificate, but the client browser rejects the connection. What is the expected behavior and the correct handling strategy?

Loading your practice session…