Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Dec 15, 2011

Managing SSL Certificate Bundles

We are about changing SSL vendors, and it appears their root is already in the build-in "ca-bundle". However, their intermediates are not. I wanted to get some feedback on the right way to manage thes...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Dec 15, 2011
That's exactly how I doit. Leave the CA bundle as it is, and add the intermediates in the chain.

 

 

To make a chain 'bundle' just cat all the intermediates into a single file and import. (Some of the intermediates have a chain of their own).

 

 

H