import godaddy wildcard cert into fortinet

[MISLuke]

I have a wildcard cert from godaddy which I generate for my exchange 2010. I have tried to import the cert into fortinet but unable to do so. Can anyone share how to do it correct? The reason is to secure my website for remote access.

[rwpatterson]

What format is the cert?

[g3rman]

Did you generate the certificate request from the firewall? If not you will need the private key as well as the cert issued by GoDaddy.

[jmac]

See if this helps: http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD30129 You need to export the certificate from Windows with the private key, then follow the steps in the KB article to break up the cert and key to import.

[MISLuke]

I download the cert for apache and inside the zip file, there is 2 crt file. one is call gd_bundle.crt and the other is domain name.crt.

[g3rman]

You need to go back to the machine that originally created the certificate signing request and try to export the private key from there. Alternatively you can use XCA to create a certificate request and private key. You can then rekey your certificate at GoDaddy. Also see this blog post: http://firewallguru.blogspot.com/2009/05/creating-self-signed-certificates-for.html

[MISLuke]

Thanks to jmac, I managed to export the cert and using the KB article, extract out the pem & cert file and import it into the firewall. Then I set fortigate to use the imported cert. Tested n its working very well. thanks all for the inputs.

[sslseller]

SSL rekeying is the process of replacing the current SSL certificate with a new one while retaining the same private key. This process is necessary when the SSL certificate is about to expire or when you need to change the information contained in the certificate, such as the domain name or organization name. Rekeying allows you to keep the same private key, which is important because it’s used to encrypt and decrypt data transmitted between your website and the user’s browser.