Menu

Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Sign In Register

Gen7 - DPI-SSL Server - SSLabs - Chain incorrect

jasni26jasni26 Newbie ✭
in Entry Level Firewalls

Hi,

i've published an internal webserver via DPI-SSL Server to the internet.

So far it's working fine.

I'm using an Sectigo wildcard serticate, which has some intermediate certificates in the chain.

When I test the URL with https://www.ssllabs.com/ I'm getting onlya B rating due to chain issues.

image.png

I've installed the intermediate certs on the Sonicwall, but it seems, that DPI-SSL Server does not send these intermediate certificates to the client.

image.png

Is there any way to configure the sonicwall to send the intermediate certs to the clients?


Thanks

Nils

Category: Entry Level Firewalls
Reply

Best Answers

Answers

  • jasni26jasni26 Newbie ✭

    Hi @BWC,

    i used openssl to get cert und key file out of the pfx. Added the intermediate file to the cert und created a new pfx. Imported the new pfx into Sonicwall and activated it in DPI-SSL Server.

    SSLAbs is now chowing an A.

    Thanks for your help.

Sign In or Register to comment.