Troubleshoot: Problem with 'This webpage is not available' and 'ERR_SSL_VERSION_OR_CIPHER_MISMATCH' when opening web gui with https on new install of NetScaler VPX KVM

Jul 9, 2015 · Comments
Citrix ADC

After installing a new NetScaler VPX KVM I had problems with reaching it when using https. My browser just showed the error message:

This webpage is not available

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

This seems to be because the NetScaler does not bind the certificate to the management services. These are the steps I did to resolve the issue.

Web GUI

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_10.png

Under “Configuration” -> “Traffic Management” -> “SSL”, press “Install”.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_9.png

Just call the certificate “ns-certificate”, and choose “ns-server.cert” and “ns-server.key”.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_8.png

Now under “Configuration” -> “Traffic Management” -> “Load balancing” -> “Services” -> “Internal Services”, choose on of the lines and press “Edit”.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_7.png

Now press “Certificates” in the right menu.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_6.png

Then press “No Client Certificate”.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_5.png

Then choose “Select Client Certificate”.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_4.png

And choose “ns-certificate”.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_3.png

And press “Bind”.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_2.png

Now do this on all the line items listed, and refresh. You should then see that all items are listed as up and with a green status.

How-to-run-NetScaler-VPX-11.0-build-55.20-in-Parallels-for-testing-or-demo-purposes_1.png

And you should now be able to reach the web GUI with https.