Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trouble with SSL certificate chain

Hi,

Almost finished installing a UTM device, but can't seem to get the certificates right.

Using openssl I've done the following
[LIST=1]
  • \OpenSSL-Win64\bin\openssl.exe genrsa -out sub.domain.com.private.key 2048
  • \OpenSSL-Win64\bin\openssl.exe req -new -key sub.domain.com.private.key -out sub.domain.com.private.csr
  • Supplied the CSR file to Comodo
  • Recived a CRT file which contains both the certificate, the intermidiate CA and the root CA
  • Extracted the certificate
  • Created a PKCS12 file
  • OpenSSL-Win64\bin\openssl.exe pkcs12 -export -in sub.domain.com.cer -inkey sub.domain.com.private.key -out sub.domain.com.p12
  • Uploaded the P12 file to the UTM
  • Uploaded the intermidiate and root CA to the UTM
[/LIST]
But for some reason the chain remains broken. 

What do I need to do?

Sincerely
Mikkel


This thread was automatically locked due to age.
Parents

  • [LIST=1]
    • OpenSSL-Win64\bin\openssl.exe pkcs12 -export -in sub.domain.com.cer -inkey sub.domain.com.private.key -out sub.domain.com.p12
    [/list]

    You have to include the complete chain in your PKCS12 file, so add
    -certfile  -certfile 

    to your pkcs12 creation command.
Reply

  • [LIST=1]
    • OpenSSL-Win64\bin\openssl.exe pkcs12 -export -in sub.domain.com.cer -inkey sub.domain.com.private.key -out sub.domain.com.p12
    [/list]

    You have to include the complete chain in your PKCS12 file, so add
    -certfile  -certfile 

    to your pkcs12 creation command.
Children
No Data