topic Certificate chain not correctly formed in General Topics

Certificate chain not correctly formed

Farzana — Tue, 13 Jun 2017 06:09:29 GMT

Hello,

I am getting the warning below after importing a certificate. Is there a link/KB I can check to fix this?

Warning: certificate chain not correctly formed in certificate dc1pa.abcd.com.au

Thanks in advance!

Re: Certificate chain not correctly formed

acc6d0b3610eec313831f7900fdbd235 — Tue, 13 Jun 2017 06:19:49 GMT

Hi @Farzana

In order to fix this issue, you need to upload a copy of your Root CA and and Intermediate CA to the firewall.

This should fix the issue.

Re: Certificate chain not correctly formed

Farzana — Tue, 13 Jun 2017 06:25:20 GMT

Hi @acc6d0b3610eec313831f7900fdbd235,

Thanks for the response. Do you mean import the certs? If not, what steps I need to take?

Re: Certificate chain not correctly formed

acc6d0b3610eec313831f7900fdbd235 — Tue, 13 Jun 2017 06:27:54 GMT

Correct, you need to first get a copy of your Root CA and Intermediate CA. The Intermediate CA is not actually mandatory unless you have one. Then click in the Import button. Map to each one of the certificates, and click in OK. It will upload, and if everything is correct the certificate chain should be formed with no problems.

Re: Certificate chain not correctly formed

Farzana — Wed, 14 Jun 2017 02:05:54 GMT

Hi @acc6d0b3610eec313831f7900fdbd235,

We currently have a wildcard SSL certificate that we use on Apache servers, Microsoft IIS servers, Cisco devices and when we try to import that same certificate to the Palos. However, we are unable to use that certificate (Device -> Certificates -> SSL/TLS Service Profile) i.e. we are unable to select the imported certificate.

We have also exported the certificates and keys from IIS and imported them to the Palos and we receive the following error message - "Warning: certificate chain not correctly formed in certificate". We have followed the links as well as the method described below and still get the same error message as above.

Is there a guide to install a certificate on Palo similar to this (this is for a Cisco ASA)?

https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=SO22529&actp=search&viewlocale=en_US&searchid=1473589594289

Re: Certificate chain not correctly formed

RichardSh — Sun, 13 Dec 2020 00:56:57 GMT

Exact same issue. Did you ever get it resolved?