Jump to content


Photo

SSL interception with custom PKI cert - CSR directly on box

SSL; interception CSR; certificate

2 replies to this topic

#1 Roland Ramsebner

Roland Ramsebner
  • Members
  • 18 posts

Posted 21 July 2015 - 07:25 AM

Hello
 

It should be possible to generate the CSR for the SSL interception certificate directly on the box.

FYI: V3 certificates could not be requested via Microsoft CA webinterface "certsrv" as described in techlib.

https://techlib.barr...nableappcontrol

Thanks and Regards, Roland



#2 Roberto Winter

Roberto Winter
  • Members
  • 2 posts

Posted 22 July 2015 - 11:03 PM

I have the same problem. It doesn't make sence to have the ability to sign/create my own Certificate but not able to generate the necessary CSR file to get a CA to sign it. Question... how do I generate a CSR without using OpenSSL?

 

Thanks, Roberto



#3 Roberto Winter

Roberto Winter
  • Members
  • 2 posts

Posted 22 July 2015 - 11:29 PM

I guess snooping around helps. The CSR can be generated on the appliance by using the external facing appliance interface and not in the appliance user/admin GUI.... Confusing!





Reply to this topic