Gen7 - DPI-SSL Server - SSLabs - Chain incorrect

jasni26

Hi,

i've published an internal webserver via DPI-SSL Server to the internet.

So far it's working fine.

I'm using an Sectigo wildcard serticate, which has some intermediate certificates in the chain.

When I test the URL with https://www.ssllabs.com/ I'm getting onlya B rating due to chain issues.

I've installed the intermediate certs on the Sonicwall, but it seems, that DPI-SSL Server does not send these intermediate certificates to the client.

Is there any way to configure the sonicwall to send the intermediate certs to the clients?

Thanks

Nils

BWC

@jasni26 I never used Server DPI-SSL but is it possible that you upload a cert which contains both certs, your server cert + Sectigo Intermediate and have this bundle selected when configuring DPI-SSL?

--Michael@BWC

jasni26

https://community.sonicwall.com/technology-and-support/discussion/comment/13025#Comment_13025

Hi @BWC, I'll check if it's possible to add the intermediate to the pkcs12 cert for the server.

jasni26

Hi @BWC,

i used openssl to get cert und key file out of the pfx. Added the intermediate file to the cert und created a new pfx. Imported the new pfx into Sonicwall and activated it in DPI-SSL Server.

SSLAbs is now chowing an A.

Thanks for your help.