Server certificate trust issue

[e***@gmail.com]

Hello all.

I have successfully created a server certificate which I'm using for a SSTP
VPN server authentication.
The VPN server runs in a Mikrotik router fine.

I'm able to connect and establish a SSTP connection using a Windows10 client,
to which I have installed the CACert CA class1 and class3 root certificates.

With another client, a Windows7 machine, I am unable to connect due to an
error message given by the Windows VPN client; "A certificate chain processed
but terminated in a root certificate which is not trusted by the trust
provider"

Running any SSL tests, ie. DigiCert tool, I run into the same issue, the
tools claim that the server SSL certificate is not trusted; "The certificate
is not signed by a trusted authority (checking against Mozilla's root store).
If you bought the certificate from a trusted authority, you probably just need
to install one or more Intermediate certificates. Contact your certificate
provider for assistance doing this for your server platform."

Both class1 and class3 CACert certificates are in place, I've even changed the
CA store between Trusted Root CA's and Intermediate CA's to see would the
problem be there.

Any clue what's wrong?

.-.-.
Erik

[Benny Baumann]

Hi,

Post by e***@gmail.com
Hello all.
I have successfully created a server certificate which I'm using for a SSTP
VPN server authentication.
The VPN server runs in a Mikrotik router fine.
I'm able to connect and establish a SSTP connection using a Windows10 client,
to which I have installed the CACert CA class1 and class3 root certificates.
With another client, a Windows7 machine, I am unable to connect due to an
error message given by the Windows VPN client; "A certificate chain processed
but terminated in a root certificate which is not trusted by the trust
provider"
Running any SSL tests, ie. DigiCert tool, I run into the same issue, the
tools claim that the server SSL certificate is not trusted; "The certificate
is not signed by a trusted authority (checking against Mozilla's root store).

...

There are different trust stores, Mozilla is one of them. Microsoft uses
a different one.

Post by e***@gmail.com
If you bought the certificate from a trusted authority, you probably just need
to install one or more Intermediate certificates. Contact your certificate
provider for assistance doing this for your server platform."
Both class1 and class3 CACert certificates are in place, I've even changed the
CA store between Trusted Root CA's and Intermediate CA's to see would the
problem be there.

Please check in the MMC certmgr.msc addon, if the CAcert Class 1 and
Class 3 installed as trusted roots.

Post by e***@gmail.com
Any clue what's wrong?
.-.-.
Erik

Regards,
BenBE.