Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

ACE: installing SSL Certs and Key pairs

Hi,

In response to my CSR, I've received files that need installing.

What files are needed. (Is it three CA, pri, pub!!).

How do I identify what file is what?

Thank you in advance.

SS

1 ACCEPTED SOLUTION

Accepted Solutions

Re: ACE: installing SSL Certs and Key pairs

In some plaforms you concatenate the certs in certificate chain.

In ACE you need to import Certs individually. Once all certs are imported then only you can include them in chain group.

So the sequence will be

1.create keypair

2. create CSR & send to CA

3. Import Certs

4. creat chain group

Syed

5 REPLIES
Community Member

Re: ACE: installing SSL Certs and Key pairs

To add to the above, my original CSR indicated the server is Apachi, (not ACE) as that would be a flexible one.

Thanks

SS

Community Member

Re: ACE: installing SSL Certs and Key pairs

Add more to the above,

The certificate now comes in two parts (chained certs!!0.

I've been told to merge the two together and configure as one cert.

I need to confirm merged file is usable in ACE? And merging format is as below.

-----BEGIN CERTIFICATE-----

bla bla=

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

bla bla=

-----END CERTIFICATE-----

Is any one able to advice please?

SS

Re: ACE: installing SSL Certs and Key pairs

If you created CSR on ACE then you must have created the keypair first. Creating that Keypair makes Public & Private Key Available to CA.

When you get Server cert back from CA, you just need to import certs. If you have a certificate chain then import all the certs individually in the chain

for example if two certs in chain are Intermediate.pem & xyz.pem then import them individually using

Crypto import terminal Intermediate.pem

Crypto import terminal xyz.pem

then create a chain-group with both certs as member

Crypto chaingroup xyz-chain

Cert Intermediate.pem

Cert xyz.pem

and then call it in the SSL service

ssl-proxy service SSL_SERVICE

key xyz.com-key.pem

cert xyz.pem

chaingroup xyz-chain

and then finally call it in the

class xyz-https

loadbalance vip inservice

loadbalance policy xyz-policy

loadbalance vip icmp-reply active

ssl-proxy server SSL_SERVICE

HTH

Syed

Community Member

Re: ACE: installing SSL Certs and Key pairs

Syed,

Very helpfull info.

I have certs

I have server certs

and possibly ican also use a recognised CA name

Should there be an order for configuring what is listed first in the chain group. Asking this because, server team advice me that in one text file they include the certs and then the server certs.

Thank you SS

Re: ACE: installing SSL Certs and Key pairs

In some plaforms you concatenate the certs in certificate chain.

In ACE you need to import Certs individually. Once all certs are imported then only you can include them in chain group.

So the sequence will be

1.create keypair

2. create CSR & send to CA

3. Import Certs

4. creat chain group

Syed

469
Views
5
Helpful
5
Replies
CreatePlease to create content