Page 1 of 1

Can't get SSL to work

Posted: Wed Jul 07, 2010 7:54 am
by someuser
I've purchased an SSL cert from GoDaddy, I've imported it and it seems to look ok, except that it's "unknown"
Any suggestions?

[admin@MikroTik] /ip service> print
Flags: X - disabled, I - invalid
# NAME PORT ADDRESS CERTIFICATE
0 telnet 23 0.0.0.0/0
1 ftp 21 0.0.0.0/0
2 www 80 0.0.0.0/0
3 X ssh 22 0.0.0.0/0
4 www-ssl 443 0.0.0.0/0 (unknown)
5 api 8728 0.0.0.0/0
6 winbox 8291 0.0.0.0/0

Re: Can't get SSL to work

Posted: Wed Jul 07, 2010 8:15 am
by fewi
Import the certificate file, then the private key, then the chain certificate file. Also, the certificate name is arbitrary and can be set in "/certificate".

Re: Can't get SSL to work

Posted: Wed Jul 07, 2010 8:23 am
by someuser
Import the certificate file, then the private key, then the chain certificate file. Also, the certificate name is arbitrary and can be set in "/certificate".
OK thanks,
Chain certificate file is?

I was issued from Godaddy
2 certificates

1st is "mydomain.com.crt"
2nd is "sf_bundle.crt"

The 2nd is the chain cert?

Import the 1st cert., then the private key I generate, then the 2nd cert.

Re: Can't get SSL to work

Posted: Wed Jul 07, 2010 8:29 am
by fewi
The chain is what by default downloads as intermediary.crt for Apache. It links you to Godaddy to a trusted root.

Re: Can't get SSL to work

Posted: Wed Jul 07, 2010 11:21 am
by someuser
The chain is what by default downloads as intermediary.crt for Apache. It links you to Godaddy to a trusted root.
the clincher:

ip service set www-ssl certificate=cert1
did it

Read the manual. :shock: