Web Appliance: Support Intermediate Certificates for Certificate Authority
Customer would like to use a custom Certificate as Certificate Authority.
According to an internal KBA "Customer Upload of Signing Certificate" the CA Certificate needs to be a top-level Root CA.
The customers CA Certificate is not a top-level Root CA, so he needs to be able to also import an Intermediate Certificate, and therefor requests this feature
Why is this still not implemented? The certificate is a signing certificate. There is no technical reason it cannot be used to sign certificates.
Caleb Reusser commented
Agreed. It is very annoying to have so many certificates added to the Web Appliance or to have to put sites in HTTPS scanning exemption because their certificate chain is incomplete. All the browsers are able to handle an incomplete certificate chain so why can't the Sophos Web Appliance?
Yes, a missing feature. Please introduce this feature. Thanks in advance.