Can wayk den use CRT certificate

Can wayk den use CRT certificate

avatar
xiangyuqi
Disabled

Hi,

I am researching the wayk den certificate's authorization issue. i find the related instruction here:https://github.com/Devolutions/WaykDen-ps#certificate-configuration. It suggest us use pem + key or pfx (PKCS#12) format. Can we use the CRT+key format ? since CRT is similar likt PEM, they are trasferable .

Thanks

Best regards,

Shawn

All Comments (17)

avatar

Hi Shawn,

The .crt file extension is often used for either the textual (pem) representation or binary representation of a certificate. If your .crt file is in textual representation (pem) it should work. As for the binary representation, it cannot be used to encode a chain (multiple certificates) unlike the textual encoding. Since configuring a chain is important (leaf certificate + intermediate CA), a format that cannot encode a chain is not supported, which is why we support .pem + .key or .pfx.

Best regards,

Marc-André Moreau

avatar
xiangyuqi
Disabled

Hi Marc,

Thanks a lot for the detailed explanation, i will have a try using .crt with textual representation , then revert you my update.

Best regards,

Shawn

2327 0807

avatar
xiangyuqi
Disabled

Hi Marc,

Before i config the certification, i want to reconfig my configuration. i followed the instruction(https://github.com/Devolutions/WaykDen-ps#configuration), after i tying my new realm, windows pop out two errors forbiden me to moving forward, could you help me on it? and how could i proceed?

avatar

Hi Shawn,

The command in the screenshot has a few issues, it should look like this:

Set-WaykDenConfig -Realm 'chinabondconnect.com' -ExternalUrl 'https://den.chinabondconnect.com' -ListenerUrl 'http://localhost:4000'

Best regards,

Marc-André Moreau

avatar
xiangyuqi
Disabled

ohh, my typo!

Thanks Marc!

Hi Shawn,

The command in the screenshot has a few issues, it should look like this:

Set-WaykDenConfig -Realm 'chinabondconnect.com' -ExternalUrl 'https://den.chinabondconnect.com' -ListenerUrl 'http://localhost:4000'

Best regards,