Header Only - DO NOT REMOVE - Extreme Networks

Wing Controller SSL Import


Has anyone had any success importing SSL certificate from GoDaddy or other 3rd Party into Wing Controller?

We are able to import from a local CA but no 3rd party certs will work.

6 replies

Userlevel 6
Hello Matt, Can you make sure you import the whole chain? See this article on GTAC Knowledge Base < https://gtacknowledge.extremenetworks.com/pkb_mobile#article/l:en_US/kA134000000GxFJCA0/s > Regards, Ondrej
Userlevel 7
Ondrej Lepa wrote:

Hello Matt, Can you make sure you import the whole chain? See this article on GTAC Knowledge Base < https://gtacknowledge.extremenetworks.com/pkb_mobile#article/l:en_US/kA134000000GxFJCA0/s > Regards, Ondrej

Here's a non-mobile link to the same article 🙂
https://extremeportal.force.com/ExtrArticleDetail?n=000014936
Yes. I import the whole chain. everything works fine until i get to importing the actual certificate.

The Root, Intermediates upload fine at first when creating the trust. When uploading the server cert I get an message saying that the private key doesnt match.

If I create the CSR from the controller itself, and get the certs signed, do the upload the the same way, I get a message saying that the private key isnt found in the datastore, even though the system creates it itself...

If I do from Microsoft CA, The upload works correctly as expected. Just not sure what the catch is with doing from 3rd Party CA's
Userlevel 6
Matt Compton wrote:

Yes. I import the whole chain. everything works fine until i get to importing the actual certificate.

The Root, Intermediates upload fine at first when creating the trust. When uploading the server cert I get an message saying that the private key doesnt match.

If I create the CSR from the controller itself, and get the certs signed, do the upload the the same way, I get a message saying that the private key isnt found in the datastore, even though the system creates it itself...

If I do from Microsoft CA, The upload works correctly as expected. Just not sure what the catch is with doing from 3rd Party CA's

Matt, I suggest to open a case with GTAC sonwe can take a look. There might be something small missing Regards, Ondrej
Matt Compton wrote:

Yes. I import the whole chain. everything works fine until i get to importing the actual certificate.

The Root, Intermediates upload fine at first when creating the trust. When uploading the server cert I get an message saying that the private key doesnt match.

If I create the CSR from the controller itself, and get the certs signed, do the upload the the same way, I get a message saying that the private key isnt found in the datastore, even though the system creates it itself...

If I do from Microsoft CA, The upload works correctly as expected. Just not sure what the catch is with doing from 3rd Party CA's

I did and its been over a week troubleshooting with engineers. So I thought I would check here if someones actually been able to get this to work.
Userlevel 6
Matt Compton wrote:

Yes. I import the whole chain. everything works fine until i get to importing the actual certificate.

The Root, Intermediates upload fine at first when creating the trust. When uploading the server cert I get an message saying that the private key doesnt match.

If I create the CSR from the controller itself, and get the certs signed, do the upload the the same way, I get a message saying that the private key isnt found in the datastore, even though the system creates it itself...

If I do from Microsoft CA, The upload works correctly as expected. Just not sure what the catch is with doing from 3rd Party CA's

Matt,

I managed to install Comodo certificate without issues



Let me know the case number and I'll take a look if not sorted yet.

Regards,
Ondrej

Reply