Skip to main content
marliyev
New Member
April 13, 2020
Question

Can not install Root CA cert

  • April 13, 2020
  • 1 reply
  • 5115 views

Hi,

Cant install CA cert to Fortigate. tried from web and cli. getting from web anf cli difeerent errors.

1 reply

emnoc
New Member
April 13, 2020

Is the certificate that your installing a rootCA? if you try to intall a non-toot CA as a CA certificate it will fail and error out. Run the cert thru openssl and validate the CA type

 

eg

openssl x509 -in myprivrootCA.cer -noout -text | grep CA

                CA:TRUE

 

This will confirm the cert is not corrupt and also validate that it is a "rootCA"

 

Ken Felix

marliyev
marliyevAuthor
New Member
April 13, 2020

hi,

thanx for reply. RootCA is trusted, am using this CA on other machines like Cisco ASA, Router. This CA is openssl based and self-signed. I cant verify on fortigate ca is trusted or not cause ca cert not installed. i want to use ipsec s2s vpn on fortigate using rsa auth, thats why need ca cert.

marliyev
marliyevAuthor
New Member
April 14, 2020

am getting this error from console when copy-paste the ca cert in PEM format:

 

"Input is not a valid CA certificate."

 

same error from web. checked date and time, they are correct.