How to generate the Certificate Chain for AWS load balancer?

Question

I'm using Amazon Load Balancer with SSL configuration. everything when fine except on Firefox that show the exception page. It looks not self to user.

This article suggest to put the Certificate Chain to the configuration section.

My SSL provider is Comodo (InstantSSL). They provide two files .crt and .ca-bundle only.

How can i generate the Certificate Chain?

Answer 1

You can cat the .crt and the .ca-bundle file together. That's what we wound up doing using a service called OpDemand, which is backed by AWS.

cat certfile.crt bundle.ca-bundle >> chain.crt

chain.crt should be the file you're looking for. Also, the order is important. The certificate.crt file has to be first.