topic Re: CSR Certificate Issue in General Topics

CSR Certificate Issue

karthikeyanB — Tue, 26 Nov 2019 11:53:33 GMT

Hello Team,

Three year before ,One of my customer is generated the certificate from linux machine and sent it to comodo for third party sign.

Now they got new palo alto firewall and he is trying to install that certificate on palo alto but while installing certificate we are facing "Mismatched Public and Private keys"

I have one more doubt that, in order for creating a External CA signed certificate. What is the proper way to achieve it whether by generating the CSR from a Linux machine (or) CSR that generated by the PA Firewall itself. Do clarify me on the same. Thanks in advance !!

Best Regards,

Karthikeyan Balamurugan

Regards

Karthikeyan Balamurugan

Re: CSR Certificate Issue

S.Cantwell — Tue, 26 Nov 2019 18:18:43 GMT

@karthikeyanB

Definitely creating the CSR on the FW is the correct way to do it.

If the error is mismatched private/public keys, then... they will need to export the cert AND the private key, and import on the FW.

To be fair, I think the best thing to do,.. create the CSR on the FW and ask Comodo to sign it. As they have already paid for the cert, I do not see Comodo pushing back on this request... I have lost my certificate signing requests before and create a new one with out issue.

Granted.. it would have to be identical name/CN to for it to be re-signed at no charge.

Re: CSR Certificate Issue

BPry — Wed, 27 Nov 2019 04:12:25 GMT

@karthikeyanB,

Generating the CSR from the firewall or generating it from a server doesn't matter, as long as you input the proper information either one works perfectly fine. The advantage to generating the CSR on a server is that you can add multiple SANs, which may be exactly why they did it that way in the first place.