Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
easgs
New Contributor

certificate chain shown as Incomplete on SSL scan with https://www.ssllabs.com/ssltest/

we have a problem with certificates and fortiweb, we get a certificate chain error shown as Incomplete on SSL scan with https://www.ssllabs.com/ssltest/, but browsers show certificates as valid, and the complete chain is ok, we uploaded the certificate to fortiweb, and to the IIS server, we get this error with sslshopper too.

 

 

WhatsApp Image 2025-04-11 at 11.36.11 AM.jpegWhatsApp Image 2025-04-11 at 11.36.54 AM.jpeg

Easgs
Easgs
3 REPLIES 3
AEK
SuperUser
SuperUser

The web servers don't show error because they know how to rebuild the chain. However the mobile apps don't do that, probably because they are lazy or for security.

So in case mobile apps will use this site then you need to add the certificate chain, otherwise you will have SSL error in your app.

 

In policy:

cert.png

AEK
AEK
easgs
New Contributor

So, we have to add the server certificate in the certificate field wich we already did, and the Intermediate certificate in the certificate Intermediate field?

Easgs
Easgs
AEK

Exactly.

AEK
AEK
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors