Community discussions

MikroTik App
 
someuser
Member Candidate
Member Candidate
Topic Author
Posts: 102
Joined: Tue Apr 13, 2010 7:05 am

Can't get SSL to work

Wed Jul 07, 2010 7:54 am

I've purchased an SSL cert from GoDaddy, I've imported it and it seems to look ok, except that it's "unknown"
Any suggestions?

[admin@MikroTik] /ip service> print
Flags: X - disabled, I - invalid
# NAME PORT ADDRESS CERTIFICATE
0 telnet 23 0.0.0.0/0
1 ftp 21 0.0.0.0/0
2 www 80 0.0.0.0/0
3 X ssh 22 0.0.0.0/0
4 www-ssl 443 0.0.0.0/0 (unknown)
5 api 8728 0.0.0.0/0
6 winbox 8291 0.0.0.0/0
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: Can't get SSL to work

Wed Jul 07, 2010 8:15 am

Import the certificate file, then the private key, then the chain certificate file. Also, the certificate name is arbitrary and can be set in "/certificate".
 
someuser
Member Candidate
Member Candidate
Topic Author
Posts: 102
Joined: Tue Apr 13, 2010 7:05 am

Re: Can't get SSL to work

Wed Jul 07, 2010 8:23 am

Import the certificate file, then the private key, then the chain certificate file. Also, the certificate name is arbitrary and can be set in "/certificate".
OK thanks,
Chain certificate file is?

I was issued from Godaddy
2 certificates

1st is "mydomain.com.crt"
2nd is "sf_bundle.crt"

The 2nd is the chain cert?

Import the 1st cert., then the private key I generate, then the 2nd cert.
Last edited by someuser on Wed Jul 07, 2010 8:33 am, edited 1 time in total.
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: Can't get SSL to work

Wed Jul 07, 2010 8:29 am

The chain is what by default downloads as intermediary.crt for Apache. It links you to Godaddy to a trusted root.
 
someuser
Member Candidate
Member Candidate
Topic Author
Posts: 102
Joined: Tue Apr 13, 2010 7:05 am

Re: Can't get SSL to work

Wed Jul 07, 2010 11:21 am

The chain is what by default downloads as intermediary.crt for Apache. It links you to Godaddy to a trusted root.
the clincher:

ip service set www-ssl certificate=cert1
did it

Read the manual. :shock:

Who is online

Users browsing this forum: sergey343 and 21 guests