Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 6 subscribers
  • Views 3584 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to download Let's Encrypt certificate

Steven Lamouroux

Hi guys,

I've a problem with Let's Encrypt certificate, I hope it's the right category.

I explain : I configured 3 auto-renew certificates with Let's Encrypt, this work fine :) First one has 12 domains, second one has 10 and third has 1. When I try to download the third, no problem : I put PKCS12 password and certificate is downloading. When I try to do the same with first and second one, nothing happening after I put PKCS12 password. I've done the same test with PEM export and try another browser with same problem. I check log but it seems no error about this.

I'm running Sophos UTM 9.605-1

Have you any idea of what happening or what I've done wrong ? Some of you have same problem ?

Many thanks in advance.

Steven



This thread was automatically locked due to age.
Parents
  • 0

    Salut Steven and welcome to the UTM Community!

    Are you able to make those first two work with anything else?  What are you doing to make the PKCS#12 file multi-domain?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Salut Steven and welcome to the UTM Community!

    Are you able to make those first two work with anything else?  What are you doing to make the PKCS#12 file multi-domain?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson

    Hi Bob, thanks for your answer :)

    Those certificates only work with Sophos as it's UTM which create them. They are used with reverse proxy and I've no problem with it, renew works fine too. I'm using this way since it's not yet possible to create a wildcard certificate.

    To make PKC12 file, I go to "Webserver Protection" and "Certificate manage". Here I found all certificate save on UTM like this and I click on "Télécharger" (download) button for this one I need. 

    Once done, new popup open to enter password, repeat password and click on Télécharger. 

    Popup closing and nothing happen.

    Hope it can help you.

    Best regards,

     

    Steven

  • 0 in reply to Steven Lamouroux

    I query one like these via REST, which is working fine. Didn’t try via GUI till now. But I will try that later.

    Strange thing.

    BR

    Alex

    -

  • 0 in reply to Alexander Busch

    Hi,

    I think I've understand why it doesn't work with GUI, thanks Alex for putting me on the right track. Friendly name of certificate is "Auto-Renew Let'sEncrypte Skype", this name contains an apostrophe. File generation works fine, I can found it in CLI on Sophos : 

    vmapp-sophos:/var/sec/chroot-httpd/var/webadmin/var/SzeighXvkDffiVWYAodS/downloads/REF_AoRCSeTDnYQI # ls
    Auto-Renew Let'sEncrypt Skype.p12

    This file contains apostrophe too. If I put this URL in browser (ip_of_UTM:port_UTM/.../Auto-Renew Let'sEncrypt Skype.p12), file is downloading. The certificate which contains only one domain has not apostrophe in his name, others one yes, that's why it can be downloaded. Maybe Sophos doesn't well generate URL when friendly name contain apostrophe ?

    I can now use Let'sEncrypt certificate.

    Thanks for your help [:D]

    Steven

  • 0 in reply to Steven Lamouroux

    Hi Steven,

    glad you found the culprit. Sophos should check the string at time of generating the cert. Today this should not be a problem, but sometimes special characters causes that.

    In german I try to skip the umlaut characters  ;-)

    Best regards

    Alex

    -

Unfiltered HTML