Forum Discussion

Brian_Kenworthy's avatar
Brian_Kenworthy
Icon for Nimbostratus rankNimbostratus
Jul 22, 2009

Add root CA to ca-bundle?

Hi all,     VeriSign has started signing certificates with a new intermediate root CA for their PKI customers - VeriSign Class 3 Secure Server CA - G2. I do not see this certificate in the...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
1/ What do I use for the rootCA.crt? I don't see this file in /config/ssl/ssl.crt ??

 

rootCA.crt is root certificate from your CA. you should be able to get it from the CA website.

 

 

2/ The rootCA is suppose to be optional, so I've tried it without the rootCA but when I run that against the site's crt, I get this error:

 

i believe u have to put root certificate in the chain.crt to make openssl verify return OK. anyway, root certificate is not required in chain file (since it must be installed in browser).
Nath's avatar
Nath
Icon for Cirrostratus rankCirrostratus
Mar 17, 2016
Hi Nitass, I am a little bit confused on I put my SSL cert and rootCA and create a bundle then use this bundle to Trusted Certificate Authorities but still no luck. Do you have any suggestions Sir?