[niXta]

Hi!

I have been using this startup script to change the cert on my dd-wrt r7000, it has been working perfectly and my certificate is about to expire. So I renewed the cert and installed it on my NAS which asked for "Private Key", "Certificate" and Intermediate certificate".

From Comodo I got a zip with:
www_URL_com.ca-bundle
www_URL_com.crt

These files was generated from the NAS:
server.key
server.csr

So I put:
Private Key = server.key
Certificate = www_URL_com.crt
Intermediate certificate = www_URL_com.ca-bundle

All went well there and it is working as it should.

But when I am trying to add it to my startup script on the R7000 it does not work and I get a "connection timed out".

I got the "server.key" replacing the "key.pem" and "www_URL_com.crt" replacing the "cert.pem" in the script below:

[niXta]

Ok, so somewhere along the line intermediate certificates became a requirement.
Apache is fine with stacking intermediate/bundle certificates on top of each other in cert.pem after the server cert.

So:
echo "-----BEGIN RSA PRIVATE KEY-----
server.key
-----END RSA PRIVATE KEY-----" > /tmp/ssl/key.pem

echo "-----BEGIN CERTIFICATE-----
www_URL_com.crt
-----END CERTIFICATE-----
www_URL_com.ca-bundle (root cert?)
-----END CERTIFICATE-----
www_URL_com.ca-bundle (intermediate cert?) (same file)
-----END CERTIFICATE-----" > /tmp/ssl/cert.pem


Up and running!