Return-Path: X-Original-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 12659D186 for ; Fri, 9 Nov 2012 20:15:32 +0000 (UTC) Received: (qmail 15460 invoked by uid 500); 9 Nov 2012 20:15:31 -0000 Delivered-To: apmail-incubator-cloudstack-dev-archive@incubator.apache.org Received: (qmail 15430 invoked by uid 500); 9 Nov 2012 20:15:31 -0000 Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: cloudstack-dev@incubator.apache.org Delivered-To: mailing list cloudstack-dev@incubator.apache.org Received: (qmail 15422 invoked by uid 99); 9 Nov 2012 20:15:31 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Nov 2012 20:15:31 +0000 X-ASF-Spam-Status: No, hits=-1.6 required=5.0 tests=RCVD_IN_DNSWL_MED,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: local policy) Received: from [74.125.149.238] (HELO na3sys009aog115.obsmtp.com) (74.125.149.238) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Nov 2012 20:15:25 +0000 Received: from mail-vb0-f69.google.com ([209.85.212.69]) (using TLSv1) by na3sys009aob115.postini.com ([74.125.148.12]) with SMTP ID DSNKUJ1kSJrmAaMeSlk38dd9fTSpq8NtoXLw@postini.com; Fri, 09 Nov 2012 12:15:05 PST Received: by mail-vb0-f69.google.com with SMTP id fq11so6617539vbb.0 for ; Fri, 09 Nov 2012 12:15:03 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:x-gm-message-state; bh=S+FUm2ZcXUH7XrmyQK9SX356WrAfb5TJTBmz2gpyw2M=; b=H3dssTtYnkkvJWnb/ib+4albluelHbgPjEIqFVx75qSHmNZhy6EXUV5MsVNL1akOXC bOHlASel0162lfguGCse84lHm9kx6mgUOfB3M2ZNVnUgX5Zd9XHCZ9Wh/+hxmmQgNYrh e0eAgomYYnDdLCRPqqtRQxDce7l4iada2X4ecWbncb12XPZnXALbToxkqD4T3ialwVKk E3ayIUnfF3EuelYh2MX1evNdBtYjhMhYrNTQuMpVpPxCgG86Sy2WqPBeRCs8XrNdaEb8 S+ziZsMozV3k3xbpO9A2CqD/0soa6hqsPTdgt/NMTCE3TNfjjPJc2vH9ozdUIRUpb2qQ HHHw== Received: by 10.221.0.212 with SMTP id nn20mr11595745vcb.32.1352492103892; Fri, 09 Nov 2012 12:15:03 -0800 (PST) MIME-Version: 1.0 Received: by 10.221.0.212 with SMTP id nn20mr11595738vcb.32.1352492103817; Fri, 09 Nov 2012 12:15:03 -0800 (PST) Received: by 10.58.239.135 with HTTP; Fri, 9 Nov 2012 12:15:03 -0800 (PST) In-Reply-To: References: Date: Fri, 9 Nov 2012 15:15:03 -0500 Message-ID: Subject: Re: Help Needed: How can I use an SSL certificate that contains an intermediate CA? From: Chip Childers To: cloudstack-dev@incubator.apache.org Content-Type: text/plain; charset=ISO-8859-1 X-Gm-Message-State: ALoCoQkyVQIXRP/LmUBR72ekzR1VPKtGK8e4OMJuyuiYc8/XClwz4akx1yfe0LGJaOGZhmsPaUTjUxnWV8dBI0U8btqnYSer/GRWdJW1j5CM7/sJ6rduNvw4dVZ8/diaKHkgYhpmkHa2CG3No2uNYi1FVk2g2rypDLOP5C1kXkwboS6jbMPnDWaLTX6KRZYRut6wZ2sfwE6E X-Virus-Checked: Checked by ClamAV on apache.org Fantastic. Thanks Edison! On Fri, Nov 9, 2012 at 3:06 PM, Edison Su wrote: > > >> -----Original Message----- >> From: Chip Childers [mailto:chip.childers@sungard.com] >> Sent: Friday, November 09, 2012 10:46 AM >> To: cloudstack-dev@incubator.apache.org >> Subject: Help Needed: How can I use an SSL certificate that contains an >> intermediate CA? >> >> Hi all, >> >> We're trying to use a certificate that has an intermediate CA in the cert chain >> (top level CA > intermediate CA > certificate) for the console proxy. Has >> anyone documented the correct process for adding a cert chain? The logic >> for the uploadCustomCertificate API call only supports a single cert provided >> by a top level CA right now. > > > It can support cert chain, by use the id filed in the uploadCustomCertificate api. > Id =1 is root ca, 2 is intermediate ca, and so on. > >> >> -chip >