For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brian_Kenworthy's avatar
Brian_Kenworthy
Icon for Nimbostratus rankNimbostratus
Jul 22, 2009

Add root CA to ca-bundle?

Hi all,     VeriSign has started signing certificates with a new intermediate root CA for their PKI customers - VeriSign Class 3 Secure Server CA - G2. I do not see this certificate in the...
config
design
nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
Sep 13, 2011
1/ What do I use for the rootCA.crt? I don't see this file in /config/ssl/ssl.crt ??

 

rootCA.crt is root certificate from your CA. you should be able to get it from the CA website.

 

 

2/ The rootCA is suppose to be optional, so I've tried it without the rootCA but when I run that against the site's crt, I get this error:

 

i believe u have to put root certificate in the chain.crt to make openssl verify return OK. anyway, root certificate is not required in chain file (since it must be installed in browser).
Nath's avatar
Nath
Icon for Cirrostratus rankCirrostratus
Mar 17, 2016
Hi Nitass, I am a little bit confused on I put my SSL cert and rootCA and create a bundle then use this bundle to Trusted Certificate Authorities but still no luck. Do you have any suggestions Sir?