Community discussions

 
electravis
Member Candidate
Member Candidate
Topic Author
Posts: 255
Joined: Tue Jan 26, 2010 12:06 am

ssl cert error

Fri Jun 22, 2018 12:18 am

I have imported a ssl cert I got from digicert in order to use www-ssl and api-ssl. I created the cert on a linux box. Everything is working as it should I get that my tik web page connection is secure and the api is running over my secure port. However I am still getting in the log files "got CRL with bad signature issued by DigiCert....."

Not sure how to resolve this error.
Thanks
 
User avatar
chechito
Forum Guru
Forum Guru
Posts: 1740
Joined: Sun Aug 24, 2014 3:14 am
Location: Bogota Colombia
Contact:

Re: ssl cert error

Fri Jun 22, 2018 12:22 am

certificate provider will give you 2 things:

certificate
CA bundle

you have to import certificate, then your private key, then the CA bundle and you are done
 
electravis
Member Candidate
Member Candidate
Topic Author
Posts: 255
Joined: Tue Jan 26, 2010 12:06 am

Re: ssl cert error

Tue Jul 17, 2018 5:05 pm

Thanks for the info all I got from them was an email with the plaint text of the cert and ca in the email.

So what the called the web server certificate. I copied that into text file and saved that as my .cert file

What they called the Intermediate CA. I copied that into text file and saved as .ca

Next I uploaded to the tik my two above files along with my . key file i made in openssl.

I then first import my .cert then import the .key and finally the .ca file and still get the bad signature error.

At the end of the imports my my ca has an lt in status on tik and my cert has a klt in status.

Everything sounds right to me

Any thoughts.
 
tippenring
Member Candidate
Member Candidate
Posts: 179
Joined: Thu Oct 02, 2014 8:54 pm
Location: St Louis MO
Contact:

Re: ssl cert error

Tue Jul 17, 2018 5:15 pm

CRL is the cert revocation list. I'm guessing the CRL is perhaps signed by a cert which the router doesn't trust. You may need to import a different cert chain for it.
 
electravis
Member Candidate
Member Candidate
Topic Author
Posts: 255
Joined: Tue Jan 26, 2010 12:06 am

Re: ssl cert error

Tue Jul 17, 2018 11:10 pm

Sorry not real up on all the ssl cert stuff but if I uncheck under settings "crl download" the error stops and all seems to still work as expected. I cant really find any info on what crl download does and if i even needed it.

Any input.

Thanks

Who is online

Users browsing this forum: No registered users and 81 guests