Unable to upload a .pfx certificate for my web servers after updating to the latest firmware.

Question

I renewed my SSL Certificate and exported the .pfx with extended information and with the private key. When I try to upload to XG, it claims that the private key is missing or my password is incorrect. Both are just fine as I can import this cert into any other IIS server without issue. This worked fine in 15.x but now I have the latest version of 16 and no go. 
 My sites are now throwing errors regarding security.

AllanD · Answer

I just got mine to work. 
 
 My XG appliance is on a different subnet then my computer and I tried downgrading the firmware to 15.* and got a error message that it didn't work. I then tried reapplying the 16.01.02 and that failed too which I thought was weird. So I started wondering if the new 16 firmware is just having a issue uploading files. So I tried using Google Chrome from a PC on the same subnet and the certificate uploaded. 
 
 Not sure if this will help you but it's worth trying. 
 
 -Allan

AllanD · Answer

So this appears to be a FILE upload/download bug in v16, not just a certificate issue. With Firefox and IE I could not upload the certificate but I could with Chrome. So I then just generated a Certificate Signing Request and tried downloading it with FireFox. It saved a 0 byte file form the XG. Tried downloading the same CSR with Chrome and I got the full 5Kb .tz file. 
 
 I would think its a issue with the 16.* XG firmware over a bug in both IE 11 and FireFox 50.* 
 
 -Allan

sachingurung · Answer

Hi All, The issue seems to be related with the POST request from firefox. When you try to upload a certificate from FF, the POST request contains a '/' before the file name: Content-Disposition: form-data; name="certfile"; filename=" /wildcard.qa.astaro.de+intermediate.p12 ​ Using Chrome, the POST request looks like: Content-Disposition: form-data; name="certfile"; filename=" wildcard.qa.astaro.de+intermediate.p12 " This is known and reported in JIRA NC-15025. 
 Thanks