Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 4440 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trouble with SSL certificate chain

mikkeland
Hi,

Almost finished installing a UTM device, but can't seem to get the certificates right.

Using openssl I've done the following
[LIST=1]
  • \OpenSSL-Win64\bin\openssl.exe genrsa -out sub.domain.com.private.key 2048
  • \OpenSSL-Win64\bin\openssl.exe req -new -key sub.domain.com.private.key -out sub.domain.com.private.csr
  • Supplied the CSR file to Comodo
  • Recived a CRT file which contains both the certificate, the intermidiate CA and the root CA
  • Extracted the certificate
  • Created a PKCS12 file
  • OpenSSL-Win64\bin\openssl.exe pkcs12 -export -in sub.domain.com.cer -inkey sub.domain.com.private.key -out sub.domain.com.p12
  • Uploaded the P12 file to the UTM
  • Uploaded the intermidiate and root CA to the UTM
[/LIST]
But for some reason the chain remains broken. 

What do I need to do?

Sincerely
Mikkel


This thread was automatically locked due to age.
  • 0

    [LIST=1]
    • OpenSSL-Win64\bin\openssl.exe pkcs12 -export -in sub.domain.com.cer -inkey sub.domain.com.private.key -out sub.domain.com.p12
    [/list]

    You have to include the complete chain in your PKCS12 file, so add
    -certfile  -certfile 

    to your pkcs12 creation command.
  • 0
    Hi, I am having the same issue with setting up a Comodo certificate for use with the Admin and User Portal on a UTM 320 v9106-17. I have tried all of the above.  I have also tried including and not including, the intermediate and root certificates in the p12 file.  The result always that the chain is broken.  Any assistance would be greatly appreciated.  Thank you.