topic Re: LetsEncrypt SSL & Forward Trust Certificate option Grayout in General Topics

LetsEncrypt SSL & Forward Trust Certificate option Grayout

TarakBhatt — Thu, 07 Apr 2022 19:25:03 GMT

I have installed LetsEncrypt's Root, Intermediate and Certificate with Private Key on firewall. For some reason all options are grayout. I used Certbot to generate certificate. How I can resolve this?

Re: LetsEncrypt SSL & Forward Trust Certificate option Grayout

TarakBhatt — Thu, 07 Apr 2022 20:11:02 GMT

I think none of the free SSL will work with decryption. What kind of certificate I will need for decryption?

Re: LetsEncrypt SSL & Forward Trust Certificate option Grayout

BPry — Thu, 07 Apr 2022 23:12:36 GMT

@TarakBhatt,

You wouldn't get a certificate for decryption from any public CA. Generally what you would do is generate a certificate with your internal PKI, or if you don't have one you would generate one on the firewall itself. You would then import that certificate on your endpoints so that it trusts certificates generated by the firewall.

Review the following KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClmyCAC that goes over the process in-detail.

Re: LetsEncrypt SSL & Forward Trust Certificate option Grayout

TarakBhatt — Fri, 08 Apr 2022 00:53:57 GMT

I am creating local database for non-AD users for user-id authentication. It does not work without decryption. New browsers does not redirect pages with local cert. How to resolve this?