Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 26 subscribers
  • Views 1960 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

unable to upload XG SSL cert chain

Jeff Weber

I am unable to upload my SSL certificate chain to a XG115 (SFOS 17.5.4 MR-4-1).

The chain has 4 certs:
*.mydomain.com (wildcard cert)
    intermediate1
         intermedate2
                rootCA

This chain works for our public https website.

I upload the rootCA certificate in PEM format to the Certificates>Certificate authorities menu, and the cert is accepted.

I upload the intermediate2 certificate in PEM format to the Certificates>Certificates menu, and it is accepted with a green checkmark in the Authority column.

I upload the intermediate1 certificate in PEM format to the Certificates>Certificates menu, and it shows as a red X in the Authority column. Hovering over the red X displays the CN of the intermediate2 certificate, which was accepted above.

At this point I stopped and did not attempt to upload my domain wildcard cert due to the previous error.

Any help would be appreciated.

TIA,
Jeff



This thread was automatically locked due to age.
Parents
  • 0

    Solved by uploading intermediate certificates to Certificate authorities menu, instead of Certificates>Certificates menu.

     

    This was nonintuitive in that certificate authority certs are self-signed, and intermediate certs are not.

    It would be helpful to add some intermediate and/or chain certificate documentation, to XG WebUI context help, or Sophos online documentation.

     

    Jeff

Reply
  • 0

    Solved by uploading intermediate certificates to Certificate authorities menu, instead of Certificates>Certificates menu.

     

    This was nonintuitive in that certificate authority certs are self-signed, and intermediate certs are not.

    It would be helpful to add some intermediate and/or chain certificate documentation, to XG WebUI context help, or Sophos online documentation.

     

    Jeff

Children
No Data