WSA: Cert Chain Issue in HTTPS Proxy

[Jay Tiwari]

Hi Experts,

Scenario:

I am deploying WSA with HTTPS proxy. for that

1. WSA is working as subCA.

2. Root CA is somewhere else

3. Endpoints have root CA cert

Issue:

Now when WSA sends certificate to endpoint during https proxy, it doesn't send entire chain to endpoint and thus endpoint doesn't trust certificate provided by WSA.

Any pointer to solve this issue will be highly appreciated.

Many Thanks,

˜Jay

[Ken Stieers]

You have to put the public root cert on the WSA too.
Under Network/Certificate Management, click on the Manage Trusted Root Certificates, and upload your root cert.