Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 2966 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL Cert uploaded to the XG not showing as trusted

Stuart Hamilton1

Hi All,

I am clearly missing something here, but Google is not my friend on this one as I cannot find out what. I am trying to install an SSL cert to use in WAF and Mail.

I created the CSR

Downloaded the request

Requested the SSL from GoDaddy

I have downloaded every format option after my cert was approved and issued from GoDaddy, and no matter which format I use, I do not get a green check. None of my formats have a Private key. I add the PEM and the password, but still no green check.

Thanks for your help

Stu



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi Stuart, Thanks for reaching out to Sophos Community.

    Firewall generates the secret key and stores it along with the CSR.

    If the CSR was created on the Firewall, Then you'll have an option to upload the certificate in the CSR. You don't need to upload the certificate separately. 

    If you're already doing this step and still the certificate is showing up as invalid, then ensure that the Intermediate and the Root CA certificates are present on XG.

  • 0 in reply to FormerMember

    Hi Devesh,

    Thanks for the response. The CSR was created on the XG. And the cert was uploaded via the request. Under the cert Authorities, there are already two built in entries for GoDaddy. Should it not be using these?

    Thanks again for your help

    Stu

  • FormerMember
    +1 FormerMember in reply to Stuart Hamilton1

    You can always open the .crt formate of the certificate in windows, and check the Certification path. Verify whether the intermediate and Root CAs are present in Certificate > Certificate Authorities.

    Mostly it's the Intermediate CA certificate that is not present which causes the uploaded certificate to appear invalid as per my general observation with Lets Encrypt and DigiCert. But you once verify with yours. You can always get these CA certificates from Godaddy. (Private key is not required for the CA certificate) 

  • 0 in reply to FormerMember

    Thanks Devesh!

    It was indeed the intermediate cert I was missing. I found this on the GoDaddy support page (Repository (godaddy.com). I am all green now!

Reply Children