Skip to main content
easgs
Visitor III
April 21, 2025
Question

certificate chain shown as Incomplete on SSL scan with https://www.ssllabs.com/ssltest/

  • April 21, 2025
  • 3 replies
  • 1515 views

we have a problem with certificates and fortiweb, we get a certificate chain error shown as Incomplete on SSL scan with https://www.ssllabs.com/ssltest/, but browsers show certificates as valid, and the complete chain is ok, we uploaded the certificate to fortiweb, and to the IIS server, we get this error with sslshopper too.

 

 

WhatsApp Image 2025-04-11 at 11.36.11 AM.jpegWhatsApp Image 2025-04-11 at 11.36.54 AM.jpeg

3 replies

AEK
SuperUser
SuperUser
April 21, 2025

The web servers don't show error because they know how to rebuild the chain. However the mobile apps don't do that, probably because they are lazy or for security.

So in case mobile apps will use this site then you need to add the certificate chain, otherwise you will have SSL error in your app.

 

In policy:

cert.png

AEK
easgs
easgsAuthor
Visitor III
April 23, 2025

So, we have to add the server certificate in the certificate field wich we already did, and the Intermediate certificate in the certificate Intermediate field?

AEK
SuperUser
SuperUser
April 24, 2025

Exactly.

AEK
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.