SSL Certificate generation problems and solution
Posted: 2009-04-20 19:15
FZS can confuse the user when generating certificates :
When you generate your own private key and certificate and simply put a file name in the "Save key and Certificate to this file box" - after FZS has successfuly generated the certificate in its program folder - it then also only puts the name in the certificate field in the SSL/TLS section and when you confirm FZS' suggestion (no error message at this point) you will later get "Could not load certificate file" errors in the FZS log when someone tries to connect via FTPS, because FZS cannot find the file without the path.
Workaround: You need to put the FULL PATH to the certificate file in both certificate fields and you will be fine.
Suggestion: Please make FZS put the path to the file in the "Private key file" and "Certificate file" fields after the keys have been generated, even if no specific path during generation has been given OR change the wording in the fields, so that the user will know that he has to enter the full path.
Regards,
Brahman
P.S. I made some changes to the Wiki article to alert users to this issue.
When you generate your own private key and certificate and simply put a file name in the "Save key and Certificate to this file box" - after FZS has successfuly generated the certificate in its program folder - it then also only puts the name in the certificate field in the SSL/TLS section and when you confirm FZS' suggestion (no error message at this point) you will later get "Could not load certificate file" errors in the FZS log when someone tries to connect via FTPS, because FZS cannot find the file without the path.
Workaround: You need to put the FULL PATH to the certificate file in both certificate fields and you will be fine.
Suggestion: Please make FZS put the path to the file in the "Private key file" and "Certificate file" fields after the keys have been generated, even if no specific path during generation has been given OR change the wording in the fields, so that the user will know that he has to enter the full path.
Regards,
Brahman
P.S. I made some changes to the Wiki article to alert users to this issue.