SSL Chain CERT import error

[wangbq]

Hello,

I have installed SSL cert and two chain cert, I used IE to test, it is ok, but when I used Verisign installation Checker to test, it show invalid chain status, so I want to import another two coorect chain cert, but failed, it showed "error:File not recongnized types - pem, der or pkcs12, import failed"

pls advise, thanks!!!

Baoqing

[Bhavin Yadav]

Hi BQ,

From ACE perspective, if you want to verify the certificate and key, you can use following commands:

For example, to verify the public keys in the files MYRSAKEY.PEM and MYCERT.PEM match, enter:

host1/Admin# crypto verify myrsakey.pem mycert.pem

keypair in myrsakey.pem matches certificate in mycert.pem

The following example shows what the ACE displays when the public keys do not match:

host1/Admin# crypto verify myrsakey_2.pem mycert.pem

Keypair in myrsakey_2.pem does not match certificate in mycert.pem

host1/Admin#

Document link: http://www.cisco.com/en/US/partner/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/ssl/guide/certkeys.html#wp999209

Regards.

[raj.pat77]

Baoqing,

Looks like you are importing the Cert which is in a wrong format. Please visit the following site and based on the product you have purchased, you will have to select the appropriate Intermediate Certs.

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=AR657

Hope this helps

Raj

[wangbq]

Bhavin and Raj,

Thanks for your help, i thought it beacues of the cert has space in side when i copied to notpad and saved to the file. after removed the space I could import it.

Thanks&regards,

Baoqing