Intermediate SSL Certificates on Azure Websites
- by amhed
I have successfully configured an Extended-Validation Certificate on an Azure Website following this article:
http://www.windowsazure.com/en-us/documentation/articles/web-sites-configure-ssl-certificate/
The main (non-technical) stakeholder of the web application went through great lengths to validate that our site is secure. He went to this site to check the validity of our SSL:
http://www.whynopadlock.com/
The site throw the following error:
`SSL verification issue (Possibly mis-matched URL or bad intermediate cert.). Details:
ERROR: no certificate subject alternative name matches``
The certificate is installed using IP Based SSL instead of SNI. This is done this way because some site visitors still use Internet Explorer 8 on Windows XP, which has no support for SNI and throws a security warning.
Is my certificate correclty installed? I received three .CRT files from my SSL provider:
PrimaryIntermediate.crt
SecondaryIntermediate.crt
EndCertificate.crt
This is how I exported our certificate as a .PFX file to Azure:
openssl pkcs12 -export -out myserver.pfx -inkey myserver.key -in myserver.crt