10-09-2017 05:43 AM - edited 03-13-2019 10:02 PM
Hellow Experts,
We have installed Cisco Expressway C and E and done the basic configuration including CUCM discovery. Now it is the turn to make the CSR and Install the certificate. I have Purchased Standard UCC SSL Certificate from Go Daddy (2 Certificates).
I made a CSR from Expressway C (which has an FQDN ewc01.domain.com) it contians only the FQDN of the Expressway C. I given the CSR to Go Daddy and Downloaded the certificates.
Appended the CA Cert on the Expressway C and Installed the server certificate from Go Daddy.
Problem 1) Even after these I am getting the certificate error while I am accessing the web interface of the Expressway C.
Also I generated CSR from Expressway E (whcih has an FQDN of ewe01.domain.com) it has SANs ewe01.domain.com and domain.com.
Problem 2) While I am trying to request a Certificate from Go Daddy for Expressway E I am getting the error "You can not add a SAN that is the same as the domain you are already using."
Your kind support is greatly appriciated.
Thanks and Best Regards
Abdul
10-11-2017 01:42 PM
Hi,
1) If you can, please send me the Expressway FQDN in private message, so I can look at it and see what is the issue with your certificate.
2) You'll have to contact GoDaddy's support and see if their team has a workaround for it, maybe they can sign this CSR for you, because you won't be able to, they have some policy they applied when signinning certificates apparently. If not, you can go to DigiCert, a very good company I worked with, and they can sign certificates like that from experience.
By the way, why did you waste money on signing the Expressway-C server? I'm always signing Expressway-C in some internal root CA, and in Expressway-E I'm uploading this internal root CA certificate for making trust between the two Expressways.
10-16-2017 09:48 AM
Hello Mr. Salvik,
I Manged to fix the problem. I just ignored the warning and continued with fulfilling the request. I did not remove any SAN from CSR or edit it.
For more information: I was getting warning even when I removed SAN domain.com and just continued with Expressway-E.domain.com.
Thanks a lot for your time.
Abdul
04-25-2018 03:56 AM
Hello Lisensi.
Is that using godaddy ssl ?
thank you
05-22-2018 12:35 AM
Yes
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide