SSL Question unable to get local issuer certificate

Am aware that OttoFms requires proper SSL. Have done research here on the need for Intermediate Cert still having an issue. The organization working with is their own internal CA and issues SSL Certificates with no outside access. Receiving an SSL error is it possible that OttoFMS attempts to verify SSL Certificate by going to a public CA? If so any ideas on moving forward? The FMS Server is for internal purposes only and not accessible publicly.

Thank you

Hello @marka2k

Welcome to the community. I wish I had a better answer to your first question. :frowning:

Currently, there is no way to use internal CAs. We have researched allowing user’s to opt out of the requirement for SSLs with public CA’s, but we have not found a way to do it that we are comfortable with.

Most of the modern http libraries make opting out of publicly verifiable certs extremely hard to do. The library we used in Otto 3 they has this option has but it has been deprecated, and we will not use it in OttmFms.

Sorry, but at this time the only option is a publicly verifiable SSL.

Todd

1 Like

Thank you for the reply, I was afraid of that.

Mark

Hey @marka2k ,

OttoFMS version 4.9.0 introduces support for custom certs just like you’re describing. Check out the docs for setting this up on your servers.

-Kyle

@kduval

Thank you will check it out just so happens this is the perfect time for this release for us as we are in the process re-evaluating our process.

Mark

Another question: According to the Documentation that is linked above for Windows the Certificate must be either a pem or crt extension, ours is an cer will this make a difference? I obviously have not tried it yet.

Thank you

Mark

The file extension does not matter as long as it is the PEM format, I believe I called out those extensions since they’re common. Let me know if you have any issues with it!

-Kyle