Wildcard certificate for web auth on WLC

[carl_townshend]

Hi All

I am trying to upload a wildcard certificate on my WLC running version 8.0.110.0

I have a pem file with the root, intermediate and end entity in one cert.

When I upload it, it just comes up with file transfer failed.

Any idea why this is?

Are wildcard certs supported on the WLC?

Cheers

[Sathiyanarayanan Ravindran]

Hi Carl,

Run the command debug transfer all enable to check the reason for failure. There is no limitation kind of on the web-auth certificate. Ref this link Web-Auth Certificate Installation and Troubleshoot

[carl_townshend]

Hi There

It still seems to be failing with the following message,

*TransferTask: Apr 15 10:40:57.325: RESULT_STRING: TFTP receive complete... Installing Certificate.

*TransferTask: Apr 15 10:40:57.325: RESULT_CODE:13

TFTP receive complete... Installing Certificate.
*TransferTask: Apr 15 10:41:01.340: Adding cert (7406 bytes) with certificate key password.

*TransferTask: Apr 15 10:41:01.377: sshpmCheckCert: Verification return code: 1

*TransferTask: Apr 15 10:41:01.377: Verification result text: ok

*TransferTask: Apr 15 10:41:01.387: sshpmAddWebauthCert: Extracting private key from webauth cert and using bundled pkcs12 password.

*TransferTask: Apr 15 10:41:01.394: sshpmDecodePrivateKey: private key decode failed...

*TransferTask: Apr 15 10:41:01.394: sshpmAddWebauthCert: key extraction failed.

*TransferTask: Apr 15 10:41:01.394: RESULT_STRING: Error installing certificate.

*TransferTask: Apr 15 10:41:01.394: RESULT_CODE:12

Error installing certificate.

Any ideas ?

[patoberli]

Have you created the CSR with a private key? If not, do not include a private key inside the certificate.
Also have another read at this document: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html

You should also upgrade to the latest 8.0 WLC release, you use a VERY old one, with various known security issues and many bugs.