I'm currently standing up a Cisco SSM On-Prem but have hit a bit of an issue regarding creating and adding a browser TLS certificate. Our (private) Certificate Authority have very strict rules on what can and can't be in the CSR, unfortunately the SSM On-Prem GUI CSR creation screen does not fit in with their world view so I cannot create a CSR via that route!
I have been digging around on the CLI and know that OpenSSL is installed and that the front-end runs in a Docker container. Is anyone aware of any "gotcha's" for using the CLI to create a new Private Key and CSR then importing the new .PEM certificate?
I have tried once but the docker container would not restart, looking at the logs it seemed to not like the Private Key. My current assumption is that the user.pem and user.key files in /home/deployer/ssl are the correct cert/key combo - this is mapped to /etc/nginx/ssl in the frontend Docker container.
Any helpful hints would be appreciated.
