Comodo SSL making error

  • I would like to make a domain SSL (I wrote very easy :) )


    I wrote the steps:


    1.
    certtool --sec-param high -p --outfile https.key
    2.
    certtool -q --load-privkey https.key --outfile https.csr
    3.
    cat https.csr -> this copy Comodo webiste (https://secure.instantssl.com/products/SSLIdASignup1a)


    Comodo create the certificates and send a zip files :


    Contents:
    - AddTrustExternalCARoot.crt
    - ComodoUTNSGCCA.crt
    - EssentialSSLCA_2.crt
    - domains_com.crt
    - UTNAddTrustSGCCA.crt


    I open the I-mscp (I would like to create SSL a client domain):
    /client/cert_view.php?domain_id=35&domain_type=dmn


    1. place (Private key):
    I paste the https.key file


    2. place (Certificate)
    paste -> domains_com.crt


    3. place (CA bundle)
    I dont know what is the "CA bundle"?


    I see more description but I don't understand which need to be copied?
    - AddTrustExternalCARoot.crt
    - ComodoUTNSGCCA.crt
    - EssentialSSLCA_2.crt
    - UTNAddTrustSGCCA.crt


    Thx!


    KALMI

  • Please, search on our forum. I've already answered this question yesterday...

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • Hello Nuxwin!


    Sorry, I understand that is very simply task, but I don't understand. Sorry :)


    I looked at several forum and I tried more combinations, but I-MSCP is not accept my SSL certificate.


    I have get a error message "Invalid CA Bundle.". I think the third "CA bundle" is error.


    Thank you for your help!

  • Please, read that thread: i-MSCP 1.1.9 - SSL Bug

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • Hello!


    Yes, I have seen this post, but I don't understand the concept of root CA. I'm very annoyed and upset that I cannot come up with a solution, as i know that this is a very simple thing.


    I have got a zip file from Comodo:
    - AddTrustExternalCARoot.crt
    - ComodoUTNSGCCA.crt
    - EssentialSSLCA_2.crt
    - domain_com.crt
    - UTNAddTrustSGCCA.crt


    Which files need to merge and how do it the paste to the last place? I think view a file (example cat) and copy & paste or me need a other program?


    I think I created a good SSL this process:


    1. certtool --sec-param high -p --outfile https.key
    2. certtool -q --load-privkey https.key --outfile domain.csr
    3. cat domain.csr -> this copy Comodo webiste (secure.instantssl.com/products/SSLIdASignup1a)


    Thanks again for your help!

  • Re;


    The CA bundle is the concatenation of the CA chain. You can create it by running the following command:


    Code
    1. # cat EssentialSSLCA_2.crt ComodoUTNSGCCA.crt UTNAddTrustSGCCA.crt AddTrustExternalCARoot.crt > essential.ca-bundle


    Note: (You have to copy the files on your system first).


    Once it's done, you must put the content of the resulting file (essential.ca-bundle) into the CA bundle input field.


    Note: If you're lazy, you can get the CA bundle file from here


    Refs

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • Thank you! I will to write it on Hungarian forum. :)


    I have a question :)


    I would like to make SAN (subject alternative name) '.domain.hu and www.domain.hu' be one command.


    I found a command:



    openssl req -nodes -newkey rsa:2048 -nodes -keyout server.key -out domain-hu.csr -subj "/C=HU/ST=Csongrad/L=Szeged/O=CEG/OU=IT/CN=domain.hu"


    but it command create one domain to .crt.


    if I would like a command,then what is the good command?

  • Re;


    Your last question has nothing to do with the previous one. Please open another thread.


    Thread closed.


    Thanks.

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206