A few weeks ago I searched and found help in this forum about handling TLS certificate in Nomad. The question was about self signed certificates for use in an internal domain. I managed to obtain the self signed certificate but I found that the two browsers allowed by the company (Edge and Chrome) do not accept self signed certificates. So, considering that the company has its own CA widely used for its own servers (these too are not exposed in the internet as the Domino Server that hosts Nomad) we managed to obtain a TLS certificate thru this CA (using OpenSSL we created a request, we gave it to the company application that returned CertificateName.cer, CertificateName.p7b, CertificateName.p7b.pem and CertificateName.pem). Now the problem is: how can I use this regular certificate. I cannot feed it to Certificate Store because Let's Encrypt checks for a domain that does not exist on the internet.
Any suggestions? Is there an option I'm missing? Thank you for your time.
If a signed certificate is not available, a self-signed certificate may be used but requires every browser endpoint to trust that certificate at the browser and/or operating system level - ensure that the self-signed certificate meets the browser's requirements such as a Common Name that matches the host name and providing the Subject Alternate Name (SAN).
thank you for your precious suggestions. I managed to produce the TLS certificate using our internal CA and insert it into CertStore following the indications found in document KB0102662.
When importing the PEM file, a message appeared saying that the private key was missing, so a new PEM file was produced as follows: final.PEM = P.Key + file.PEM.
After this, the document TLS Credentials showed: Status: Valid and on top appeared: Issued, I thought: well that's it!
Unluckily as I submitted the document, it set in Waiting status and nothing happened then since: no messages, no indications.
Did you use the "Submit Request" or "Save & Close"?
Based on the document you should click the "Save & Close" once the status shows "Issued".
How to import TLS certificates issued from a third-party into certstore.nsf https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102662
7) It will show the imported certificated as below and status shows "Issued" with the host name of the TLS certificate which the third-party has issued as shown below. You just need to "Save & Close" the document to complete it.