I still have problems with chaining the private key and the chained public certificate for the Captive Web Portal.
The certificate and key were created with ExtremeCloud IQ on-premise. The certificate was signed by our CA and imported into ExtremeCloud IQ with the certificate chain.
Appliance: ExtremeCloud IQ On-Premise Version 20.1.6.4-NGVA
my workflow:
configure-> certificate-> certificate management-> add-> Concatenate an existing certificate and private key.
fill Name field
Certificate field with chained signed certificate in order
-----BEGIN CERTIFICATE-----
server.pem
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
intermediate CA
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
root CA
-----END CERTIFICATE-----
private key field
of course the private key for this server.pem, which is available in the drop down menu.
password
the password for decrypt the private key
Save
After concatenate, the certificate can be seen in the list. The Encrypted column shows a true. To check this, I downloaded the file and found that this file contains the private key at the end without encryption.
Usually there is a line above and below the private key:
----- BEGIN ENCRYPTED PRIVATE KEY -----
The encrypted key
----- END ENCRYPTED PRIVATE KEY -----
My created file says:
----- BEGIN PRIVATE KEY -----
the decrypted key
----- END PRIVATE KEY -----
I have already tried to import the certificate in pem format and the encrypted private key without the wizard, but the certificate cannot be updated on the access points, probably because the password for the private key is missing,for pem import there is no field for the password.
When importing with a pfx, the section of the private key after exporting the certificate is not encrypted.
What am I doing wrong? Is there a workflow for the procedure to get the right result?
I've already changed many certificates and also encrypted private keys. I don't understand why it doesn't work out here.
I need help or at least advice. thanks.
best regards
SvenM
