Help Center/ Virtual Private Network/ FAQs/ FAQs - P2C VPN/ Failed to Upload Certificates to CCM/ Error Message "The certificate chain length must be greater than 1." Is Displayed During Certificate Upload
Updated on 2025-05-14 GMT+08:00
View PDF
Share

Error Message "The certificate chain length must be greater than 1." Is Displayed During Certificate Upload

Symptom

When a certificate is uploaded to CCM, the error message "The certificate chain length must be greater than 1." is displayed.

Possible Causes

The upper-level CA certificate is not uploaded together with the current certificate.

Constraints

Before uploading certificates to CCM, ensure that the server certificate, CA certificate, and server private key have been generated. For details about how to generate certificates, see Using Easy-RSA to Issue Certificates (Server and Client Sharing a CA Certificate).

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select the desired region and project.
  3. Click in the upper left corner, and choose Networking > Virtual Private Network.
  4. In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways.
  5. Click the P2C VPN Gateways tab. In the P2C VPN gateway list, locate the target P2C VPN gateway, and click View Server in the Operation column.
  6. On the Server tab page, click Upload in the Server Certificate drop-down list box. The Cloud Certificate Manager page is displayed.
  7. On the SSL Certificate Manager page, click the Hosted Certificates tab and then click Upload Certificate.
  8. Use Notepad or Notepad++ to open the server certificate.
  9. Copy the certificate content to the Certificate File text box.

    The certificate file format is as follows:

    -----BEGIN CERTIFICATE-----
Server certificate content
-----END CERTIFICATE-----

  10. Use Notepad or Notepad++ to open the CA certificate used to issue the server certificate.
  11. Copy the certificate content to the Certificate File text box.

    The certificate file format is as follows:

    -----BEGIN CERTIFICATE-----
Server certificate content
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
CA certificate content
-----END CERTIFICATE-----

  12. Use Notepad or Notepad++ to open the private key of the server certificate.
  13. Copy the private key content to the Private Key text box.

    The private key format is as follows:

    -----BEGIN PRIVATE KEY-----
Server private key content
-----END PRIVATE KEY-----

  14. Click Submit. The certificates are uploaded.