Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 11 replies
  • Answers 2 answers
  • Subscribers 42 subscribers
  • Views 26850 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to generate csr for SSL VPN

Arjan deJongste

Hello,

Just updated a new cyberoam ING25 straight out of the box to Sophos OS, It was a clean upgrade nothing was configured yet before the upgrade.

I'am unable to create a CSR request to get a public certificate, when filling in the requested forms and clicking on save it spins for 2 seconds and then the "spinner" disappears.

It won't show the CSR request under certificates, also the option to generate a self signed certificate is greyed out. 

I also have a Cyberoam ING50 upgraded to Sophos OS, on this one I was successful in creating the CSR and getting a public certificate and it works just fine, Tried Internet Explorer 11 & 10 and Firefox to see if this was the problem, but both webbrowsers respond the same.



This thread was automatically locked due to age.
Parents
  • 0
    Try generating CSR from command line. Use any Linux/OS X/Windows with OpenSSL suite installed to issue the following command:

    openssl req -newkey rsa:2048 -nodes -subj "/CN=hostname.domain.tld" -keyout hostname.key -out hostname.req

    Remove "-nodes" if you want your private key to be encrypted on disk.

    Request public certificate from public CA and then combine certificate with the key:

    openssl pkcs12 -export -in hostname.crt -inkey hostname.key -out hostname.p12 -name "Friendly Name"

    Then you can upload P12 file to XG Appliance.

    Regards,
    Slawek

Reply
  • 0
    Try generating CSR from command line. Use any Linux/OS X/Windows with OpenSSL suite installed to issue the following command:

    openssl req -newkey rsa:2048 -nodes -subj "/CN=hostname.domain.tld" -keyout hostname.key -out hostname.req

    Remove "-nodes" if you want your private key to be encrypted on disk.

    Request public certificate from public CA and then combine certificate with the key:

    openssl pkcs12 -export -in hostname.crt -inkey hostname.key -out hostname.p12 -name "Friendly Name"

    Then you can upload P12 file to XG Appliance.

    Regards,
    Slawek

Children
No Data
Unfiltered HTML