SSL certificate

Last Updated: Feb 28, 2018 01:29PM PST

NooBaa uses a self-signed certificate by default. 

Some applications can't tolerate self-signed certificate, and in general, these certificates considered as a bad practice, for security reasons. 

If you wish to upload a valid certificate, please zip both certificate and private key in a zip. 

Make sure that both are in PEM format. 

For example, if you have a certificate named mytest_com.cert and a key named mytest_com.key, 
run the following command:
zip -0 mytest.zip mytest*

In NooBaa, navigate to management -> Configuration -> SSL Certificate and upload the zip file. 


Troubleshooting

Uploading SSL cartificate failed: The provided certificate is invalid
in most of the case, the problem is that the certificate is in binary format, instead of 
PEM
Try the following command to verify:
cat server.cert
If the output is printable, please contact support@noobaa.com
If the output is not printable, the file format can be either PKCS12 or DER format. 
In order to identify the format, run the following command:

openssl x509 -in server_DER_format.cert -inform DER -text
If it is a DER format, you will be able to see a clear text certificate. 
Convert DER to PEM with the following command:

openssl x509 -inform der -in server_DER_format.cert -out server.cert
Now zip the server certificate with the matching key and try to upload again.

If it's a PKCS12 format, you will get an error
unable to load certificate
Assuming it's PKCS12, you can convert it to PEM with the following command:

openssl pkcs12  -in server_PKCS_format.cert -out server.cert -nodes -nokeys -nomac -chain

Open server.cert and remove all the lines before 

-----BEGIN CERTIFICATE-----

Now zip the server certificate with the matching key and try to upload again.

Uploading SSL cartificate failed: end of central directory record signature not found
Usually indicates a problem with the zip. Please make sure that you zip the files without any hierarchy 


Did you find this article helpful?
195e69fe2c7a9be6b2b2aa6b87f970548@noobaa.desk-mail.com
https://cdn.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete