Using Certification Authority (CA) certificates with XCOM for Windows

Products

• XCOM Data Transport
• XCOM Data Transport - Windows
• XCOM - SUPPORT

Issue/Introduction

I am trying to configure SSL communication on an XCOM server on Windows.

1. A certificate  was obtained from a Certification Authority (CA)
2. It was copied it to the "%XCOM_HOME%\ssl\certs" folder.
3. The certificate is issued by an intermediate CA. The intermediate CA certificate is, in turn, issued by a root CA.
4. The intermediate CA certificate was copied to the "%XCOM_HOME%\ssl\certs" folder
5. The "[CA] RECEIVE_SIDE" property in the configssl.cnf file points to this certificate.

It is possible to successfully connect to the XCOM server over SSL. When trying to retrieve the certificate chain, only the server certificate and the intermediate CA certificate show up in the chain, while the root CA certificate doesn't. This may prevent clients who only trust the root CA to be able to connect to the server. 

Environment

• XCOM™ Data Transport® for Windows
• OpenSSL

Resolution

1.  Concatenate the intermediate CA and root CA certificates and put them under the [CA] heading.
2. The other certificates go under the [CERTIFICATE] heading.

Additional Information

For additional information please consult your your security admins.  We cannot configure your certificates.