Intermediate certificate

[Roland_B_]

Hi,

I have bought a SSL certificate from RapidSSL and copied it as 'certificate.pfx' to the two 'cert' directories.

Chrome accepts the SSL certificate, but Firefox does NOT.

It seems like Firefox needs the intermediate certificate from RapidSSL. Is it possible to supply this intermediate certificate through Intel WebRTC server?

Thank you.

Roland Bürkel

[Roland_B_]

I have fixed it by myself:

I have "merged" three certificates (root, intermediate, server) into one 'certificate.pfx':

openssl genrsa -out server-key.pem 2048
openssl req -nodes -new -sha256 -key server-key.pem -out server-csr.pem

--> with 'server-csr.pem' buy a SSL certificate at e.g. RapidSSL

--> receive 'server-cert.pem' after buying

--> download root and intermediate certificates from e.g. RapidSSL

--> merge all 3 certificates into one:

cat intermediate.pem rapidSSL_Root_CA.pem > chain.pem
openssl pkcs12 -export -out certificate.pfx -inkey server-key.pem -in server-cert.pem -certfile chain.pem

cp certificate.pfx ~/Release-v3.0.1/cert/

bin/initcert.js all

cp certificate.pfx ~/Release-v3.0.1/extras/basic_example/cert/

node initcert.js

[jin_l_1]

i built a webrtc application, it works fine on Chrome browser, but not on Firefox. Do i have the same issue with the certificates? 

[Roland_B_]

If you are using the self signed certificates which are created when installing the Intel-WebRTC-Server, then you have to visit the following addresses and confirm these certificates in the browser:

https://<serverIP>:8080

https://<serverIP>:8096

https://<serverIP>:443   ; // e.g. turnserver (?)

https://<serverIP>:3004

You can also try:   http://<serverIP>:3001

See also:   https://software.intel.com/en-us/forums/intel-collaboration-suite-for-webrtc/topic/623756

[Chunbo_H_Intel1]

Thanks for the sharing.