Applies to all Barracuda SSL VPNs.
SSL Certificates are a good way of protecting your SSL VPN as they allow the server to be verified by a third party.
To get a certificate, a Certificate Signing Request (CSR) will need to be generated. Log in to the Appliance interface and go to Basic > SSL Certificates. Fill in the fields under Certificate Generation and select Save. Now that the details are set the CSR can be generated. This can be downloaded by selecting the Download button next to the CSR entry. This, along with any other details the Certification Authority requires, should be sent to the CA in accordance with their instructions.
The certificate will be sent to you when it has been generated. There should be at least two certificate files provided. One will be the certificate you requested and any other certificates will be chain certificates that are used to verify the certificates trust status. If there are multiple chain certificates then it is best to contact Barracuda Networks Technical Support for assistance as the certificates will need to be merged in order to be uploaded to your Barracuda SSL VPN.
To upload the certificate to the SSL VPN, go to the SSL Certificates page again. Four fields are present in the Trusted Certificate section:
Signed Certificate: The Certificate file should be entered in this field.
Certificate Chain Bundle: The Chain Certificate file should be provided for this field. If a chain certificate is not required this can be left empty.
Certificate Password: The password for the certificate. The default is sslvpn.
Private Key: The Private Key for the certificate. This can be downloaded from the Certificate Generation section using the Download button in the Private Key entry.
Add all of these to their fields in the certificate upload section and select Upload.
When the certificate has been uploaded, the SSL Certificate Configuration can be set to the correct level. Most commonly, you have uploaded a Trusted certificate so you can set the option to that and select Save.
If the certificate uploads correctly, it can then be synchronized with the SSL VPN interface. This will copy all of the certificate files and convert them to operate on with the SSL VPN interface. To do this, select the Synchronize button at the bottom of the page in the Synchronize SSL Certificate section at the bottom of the page.
Link to this page: