Incomplete Certificate Chain

[NeilDavey]

I was wondering if anyone knows how to fix the certificate chain incomplete issue at all?

I can't seem to find the resolution for this at all.

Thanks

[PhoneBoy]

With what feature of the product are you encountering this?
What version/JHF level do you have?

[NeilDavey]

Its the SSL MAB VPN feature.

I am R80.10 take 169

[Wolfgang]

Neil,

with this information follow my suggestions from yesterday.

You can too have a look at the MobileAccessAdmin Guide, there you'll find all the needed information (see my snip from there).

regards

Wolfgang

[Wolfgang · Accepted solution]

Neil,

not sure which certificate are you talking about. But looks like your installed certificate does not include the intermediate CA from your signing CA. Your installed certificate must include all certificate from all sub CAs.

############snip from MobileAccessAdmin Guide#############

Make sure that the CRT file has the full certificate chain up to a trusted root CA.
Usually you get the certificate chain from the signing CA. Sometimes it split into separate files. If the signed certificate and the trust chain are in separate files, use a text editor to combine them into one file. Make sure the server certificate is at the top of the CRT file.

############end snip from MobileAccessAdmin Guide#############

regards

Wolfgang