For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brian_Kenworthy's avatar
Brian_Kenworthy
Icon for Nimbostratus rankNimbostratus
Jul 22, 2009

Add root CA to ca-bundle?

Hi all,     VeriSign has started signing certificates with a new intermediate root CA for their PKI customers - VeriSign Class 3 Secure Server CA - G2. I do not see this certificate in the...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Sep 13, 2011
1/ What do I use for the rootCA.crt? I don't see this file in /config/ssl/ssl.crt ??

 

rootCA.crt is root certificate from your CA. you should be able to get it from the CA website.

 

 

2/ The rootCA is suppose to be optional, so I've tried it without the rootCA but when I run that against the site's crt, I get this error:

 

i believe u have to put root certificate in the chain.crt to make openssl verify return OK. anyway, root certificate is not required in chain file (since it must be installed in browser).
  • Nath's avatar
    Nath
    Icon for Cirrostratus rankCirrostratus
    Mar 17, 2016
    Hi Nitass, I am a little bit confused on I put my SSL cert and rootCA and create a bundle then use this bundle to Trusted Certificate Authorities but still no luck. Do you have any suggestions Sir?