Results 1 to 6 of 6

Thread: ssl cert

  1. #1
    Newbie
    Join Date
    Jun 2017
    Posts
    3

    Default ssl cert

    how to install a godaddy ssl cer in config - admin - cert and ssl inspector. looks simple but so far, it does no work. please help. thanks. ver 13.

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    21,725

    Default

    Tell Godaddy Apache.

    Then you'll need to use these instructions: https://www.digicert.com/ssl-support...l-creation.htm You want to build a file with the entire chain.

    You'll be copy and pasting the various bits of the certificate chain godaddy gives you into a single .pem file, then you upload that into Untangle.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Newbie
    Join Date
    Jun 2017
    Posts
    3

    Default

    thanks for replying, that is what I did, following untangle instructions
    -----BEGIN CERTIFICATE-----
    server certificate data
    -----END CERTIFICATE-----
    -----BEGIN PRIVATE KEY-----
    server private key data
    -----END PRIVATE KEY-----
    -----BEGIN CERTIFICATE-----
    intermediate certificate data
    -----END CERTIFICATE-----
    the cert loads but I still see the cert error message, do I need to generate the sever cert again, the server and intermediate cert I download from godaddy and the private key or scr that is all I need combined them and that should be it, what I may be missing. thanks

  4. #4
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    21,725

    Default

    Oh, sorry I missed the forum.

    Loading a live SSL certificate into Untangle isn't the same thing as deploying the SSL certificate to all your devices for SSL inspector. Installing a Godaddy certificate into Untangle just means you can use HTTPs management access without the errors attached to a self signed certificate.

    You cannot purchase a certificate to make this part seamless, ok... well you CAN but I don't think you're about to set yourself up as a global certificate authority. So you need to download the appropriate certificate from your Untangle, and install it on any device that is going to be subject to the inspector.

    https://wiki.untangle.com/index.php/..._Configuration
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  5. #5
    Newbie
    Join Date
    Jun 2017
    Posts
    3

    Default

    "Third Party Certificate
    Instead of using a certificate signed by the local CA, you may instead prefer to have the Untangle server use a certificate signed by well-known CA such as VeriSign or Thawte. The advantage to using this type of certificate is client computers and devices will need no additional configuration, since most browsers are already configured to trust certificates issued by these authorities".
    Otherwise what is the point of installing a third party cert, I do not understand why the IP address should be part of the cert name, that is why we invented DNS to resolve this translations. even in SonicWALL that is a pain to configure installing an ssl cert is no difficult. lets see what tech support has to say about installing a third party cert. thanks for your help.

  6. #6
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    16,607

    Default

    You install a cert so you can connect to Untangle (admin, quarantine, etc) without a certificate warning.

    This won't help with SSL Inspection. To get rid of that warning you need to install the certificate authority on the various devices so Untangle's own created fake certificates are trusted.

    Verisign may sign a cert saying your foobarcompany.com, but they won't sign one saying you are google, wellsfargo, yahoo, bing, youtube, etc.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2