Provisioning Error when Trying to Upload SSL Key and Certificate

Products

• Services Suite

Issue/Introduction

Symptoms:
While trying to upload the SSL key and the certificate with the Pivotal SSL service, a Provisioning Error is seen as displayed in the screenshot below:

In the service instance logs, the following error appears:

Aug 02 10:09:03 SSL-Service b401ef18-3efd-4750-b8a3-98e42115dbc9/[APP/1]:  {"timestamp":"1470157743.573615074","source":"ssl-service","message":"ssl-service.service.ConfigureInstance.error","log_level":2,"data":{"error":"UploadServerCertificate: InvalidParameter: 1 validation errors:\n- field too short, minimum length 1: CertificateChain","instanceID":"08f1cb10-1420-40ff-8a27-814c76d22e15"}} 

Environment

Resolution

In the Pivotal SSL service, upload the entire certificate chain when filling in the Upload certificate field.

Obtain the intermediate chain files for the certificate from the certificate vendor. Combine these chain files with the certificate to create a single file containing the entire chain of trust. Then, upload it again. A correct certificate should look like this:

-----BEGIN CERTIFICATE-----
(Your Primary SSL certificate: YOUR-DOMAIN-NAME.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Intermediate certificate: YOUR-VENDOR/CA.crt)
-----END CERTIFICATE-----