Intermediate certificates

[damian.johnstone]

On the CSS, how do you install intermediate certificates so client browsers can know to trust your SSL certificate? Do you combine all three certificates into one associated certificate. e.g.

-----BEGIN CERTIFICATE-----

xxx

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

yyy

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

zzz

-----END CERTIFICATE-----

or associate each certificate?

[pgolding]

Danian,

Examine this page, it covers the details of how to do this. The section of interest to you is the box which discussed obtaining and installing the verisign intermediate cert -

http://www.cisco.com/warp/customer/117/expired_verisign.html

Basically you have the concept correct, but the order of certs in the chain is important.

Peter

[damian.johnstone]

Thanks Peter.

This resolved my issue. I had concatenated the certificates in the wrong order so verify was not working.

http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_tech_note09186a00801de89b.shtml

Damian