Broker VM rejects SSL certificate

SBSK-Engine — Tue, 07 Jan 2025 13:37:43 GMT

Hello PAN community,

I am trying to import a SSL certificate into our #BrokerVM
I can upload the private key, but the Server Certificate gets rejected with the Error: "failed to set custom ssl certificate"

I tried .cer and .pem files and none were accepted.

The guide only mentions the cipher as an error source, but SHA256 was used. (Configure the Broker VM • Cortex XSIAM Administrator Guide • Palo Alto Networks documentation portal)

Help would be much appreciated. Thanks

Re: Broker VM rejects SSL certificate

jorandall — Thu, 09 Jan 2025 19:13:00 GMT

A couple things to check

make sure you're uploading just the server cert, and not a cert with a CA chain
as you noted, your cert needs a strong SHA256 cipher - you can check this with openSSL: openssl x509 -noout -text -in <path_to_server_cert>

topic Broker VM rejects SSL certificate in Cortex XSIAM Discussions

Broker VM rejects SSL certificate

Re: Broker VM rejects SSL certificate