I am trying to generate self signed certificate/key, using openssl (1.1.0h) and following procedure:
openssl genrsa -aes256 -out fgtssl.key 2048
openssl req -new -key fgtssl.key -out fgtssl.csr
openssl x509 -req -days 365 -in fgtssl.csr -signkey fgtssl.key -out fgtssl.crt
When attempting to import into Fortigate (v6.0.3 build0200 KVM), getting "Incorrect certificate file key size for CA/LOCAL/REM" .
I would like to configure IPSEC VPN dialup using own generated certificates.
What is wrong with the certificate ?