Answer the question
In order to leave comments, you need to log in
How to sign a Wildcard SSL with a CSR certificate?
Greetings!
The situation is as follows:
1) There is a certificate purchased from Komodo SSL Wildcard for the domain "*.domain.ru";
2) There is a server with a Web-console (address server.domain.ru), access to which is via HTTPS. You need to install an SSL certificate on it;
3) This server does not allow importing the existing Wildcard certificate "*.domain.ru" along with its key. You can generate a CSR on the server and sign it at the CA;
4) Is it possible to sign the CSR generated by the server with the private key of the Wildcard certificate?
5) Tried to do it with openssl command:
openssl x509 -req -in server.domain.ru.csr -CA wildcard.crt -CAkey wildcard.key -CAcreateserial -out server.domain.ru.crt -days 5000
Answer the question
In order to leave comments, you need to log in
Generate a new request on the server and reissue the certificate
If you generate a new certificate request, then the meaning of the wildcard certificate disappears.
It is better to understand the reason why you cannot import the existing wildcard certificate to your server.
It is unlikely, because the purpose of the certificate is most likely SSL authentication, and not the signing of certificates. Therefore, you cannot sign other certificates with your key. (well, technically it is possible, which you did, but the chain of trust will not be built).
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question