3

I am trying to setup an SSL cert for a domain on my Zimbra server. When I go to the place where it wants to me to paste the certs into the borwser windows it pops up a little warning message that says.

Domain Certificate should be appended with CA certificate, and Domain private key should be passwordless

How do I append the CA to the domain cert?

Mark Henderson
  • 69,480
AtomicPorkchop
  • 2,005

2 Answers2

5

Export each part of the chain into x509 format, then jam them together in your favorite text-editor-that-won't-mess-with-things, the subject (your certificate) first, then its signer, with the root at the bottom of the file. You'll end up with this:

-----BEGIN CERTIFICATE-----
(Your certificate's base64 data here)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(intermediate certificate's base64 data here)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(root certificate's base64 data here)
-----END CERTIFICATE-----

(By "text-editor-that-won't-mess-with-things" I mean no Word/Wordpad; -- getting turned into – is a bad, bad thing.)

Shane Madden
  • 116,404
  • 13
  • 187
  • 256
0

You can append the .pem files together with the CA being in the bottom and then work your way up towards the top of the text file for each next-level .pem file. The following from Cisco provides some very detailed steps that should be relevant - www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080a77597.shtml.

user48838
  • 7,419