Installing Trustwave SSL Certificates

[Eric Pretorious]

Hello:

I've purchased a Trustwave SSL certificate for my domain (Rocket-Powered.com) and downloaded the .zip file that contains the certificates to my local HDD:

eric@eric-D630 ~ $ ls -1l Documents/OpenSRS/Trustwave/www_rocket-powered_com/
total 28
-rw-r--r-- 1 eric eric 1496 May 22 02:40 chain.cer
-rw-r--r-- 1 eric eric 1785 May 22 02:40 www.rocket-powered.com.cer
-rw-r--r-- 1 eric eric 1278 May 22 02:40 www.rocket-powered.com.der
-rw-r--r-- 1 eric eric 3280 May 22 02:40 www.rocket-powered.com.p7b
-rw-r--r-- 1 eric eric 1785 May 22 02:40 www.rocket-powered.com.pem
-rw-r--r-- 1 eric eric 7651 May 22 00:41 www-rocket-powered-com.zip

IIUC, I've verified that the signed certificate (www.rocket-powered.com.cer) was signed using the CA certificate (chain.cer):

eric@eric-D630 ~ $ openssl x509 -in Documents/OpenSRS/Trustwave/www_rocket-powered_com/www.rocket-powered.com.pem -text | grep -A1 'Key Identifier'
            X509v3 Subject Key Identifier: 
                94:0A:0B:28:86:D1:3B:00:0C:12:70:FC:DD:C6:69:78:CD:84:2E:23
            [COLOR="#00FF00"]X509v3 Authority Key Identifier: 
                keyid:D2:98:AA:37:94:A7:60:AF:B4:0B:00:AB:09:A5:FE:82:22:55:9F:EC[/COLOR]

eric@eric-D630 ~ $ openssl x509 -in Documents/OpenSRS/Trustwave/www_rocket-powered_com/chain.cer -text | grep -A1 'Key Identifier'
[COLOR="#00FF00"]            X509v3 Subject Key Identifier: 
                D2:98:AA:37:94:A7:60:AF:B4:0B:00:AB:09:A5:FE:82:22:55:9F:EC[/COLOR]
            X509v3 Authority Key Identifier: 
                keyid:42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF

eric@eric-D630 ~ $ openssl verify -CAfile Documents/OpenSRS/Trustwave/www_rocket-powered_com/chain.cer  Documents/OpenSRS/Trustwave/www_rocket-powered_com/www.rocket-powered.com.cer

[COLOR="#00FF00"]Documents/OpenSRS/Trustwave/www_rocket-powered_com/www.rocket-powered.com.cer: OK[/COLOR]

However, when I install the certificates (chain.cer & www.rocket-powered.com.cer), Pleask complains "Warning: Warning: the CA certificate does not sign the certificate."

What do I need to do to satisfy Plesk Panel?

 

[Eric Pretorious]

I've purchased a Trustwave SSL certificate for my domain (Rocket-Powered.com) and downloaded the .zip file that contains the certificates to my local HDD:

eric@eric-D630 ~ $ ls -1l Documents/OpenSRS/Trustwave/www_rocket-powered_com/
total 28
-rw-r--r-- 1 eric eric 1496 May 22 02:40 chain.cer
-rw-r--r-- 1 eric eric 1785 May 22 02:40 www.rocket-powered.com.cer
-rw-r--r-- 1 eric eric 1278 May 22 02:40 www.rocket-powered.com.der
-rw-r--r-- 1 eric eric 3280 May 22 02:40 www.rocket-powered.com.p7b
-rw-r--r-- 1 eric eric 1785 May 22 02:40 www.rocket-powered.com.pem
-rw-r--r-- 1 eric eric 7651 May 22 00:41 www-rocket-powered-com.zip

IIUC, I've verified that the signed certificate (www.rocket-powered.com.cer) was signed using the CA certificate (chain.cer)...

However, when I install the certificates (chain.cer & www.rocket-powered.com.cer), Pleask complains "Warning: Warning: the CA certificate does not sign the certificate."

What do I need to do to satisfy Plesk Panel?

AFAICT, uploading the .pem file (www.rocket-powered.com.pem) instead of the .cer file along with the CA certificate (chain.cer) satisfied Plesk even though the two files are identical:

eric@eric-D630 ~/Documents/OpenSRS/Trustwave/www_rocket-powered_com $ md5sum www.rocket-powered.com.cer www.rocket-powered.com.pem
84edbdd73423ec494bce04ff644adaf3  www.rocket-powered.com.cer
84edbdd73423ec494bce04ff644adaf3  www.rocket-powered.com.pem