Automation Suite Certificate update fails because Partial Chain is provided

News Knowledge Base
1

How to update the certificate for Automation when error "Either partial ca chain has been provided or leaf server certificate is not signed by provided ca" is thrown?

Issue Description: During the update procedure, error "Either partial ca chain has been provided or leaf server certificate is not signed by provided ca" is thrown.

Resolution:

  1. Check if the server cert was signed by the ca server
    1. openssl verify -CAfile ca-certifcate.crt servercertificate.crt
      • # servercertifcate.crt: OK
  2. Ask the IT dept to provide with CA chain or immediate certificates. Obtain root ca and immediate certificates for public CA by visiting their websites. (i.e https://letsencrypt.org/certificates/)
  3. Combine the root ca with the intermediate certs
    • cat intermediate.crt >> root.crt
  4. Continue with update certificate update instructions