Intermediate SSL Certs

[phcorcim]

It appears that IRC clients do actually support public signed certs, though it appears that Unreal may not support it. How do I make use of an intermediate SSL cert with Unreal? I could not find anything in the docs and nobody on IRC seemed to know. I tried inserting it in my public cert but then Unreal would not start as it appears to validate the cert and was having difficulty. You can see the cert on https://www.microchp.org/icu/ and by connecting to the server on ircs://ircd.microchp.org:4242/help

I do understand that many people use self-signed which is comon place amongst mail servers and IRC servers, but I wish to make better use of all my SSL certs. Any help would be appreciated.

[phcorcim]

I had forgotten to come back and answer this. I ran into this same problem on a Juniper DX load balancer.

Code: Select all

cat 2008.godaddy_intermediate.crt > /ircd/server.cert.pem 
cat 2008.wildcard.microchp.org.crt >> /ircd/server.cert.pem
cat 2008.wildcard.microchp.org.key > /ircd/server.key.pem

Then edit/change each comment of the intermediate key in server.cert.pem from:

Code: Select all

-----BEGIN CERTIFICATE-----
[snip...]
-----END CERTIFICATE-----

to:

Code: Select all

-----BEGIN INTERMEDIATE CERTIFICATE-----
[snip...]
-----END INTERMEDIATE CERTIFICATE-----

Leave the last secion (your public cert) as it was.

Now the client (xchat in this case) does not prompt to accept the cert any more.