need help to install CA certificate to SFTP server

[jcstaquet]

I followed these steps:

1) create CSR and private key:
$ openssl req -newkey rsa:2048 -keyout PRIVATEKEY.key -out MYCSR.csr
Generating a RSA private key
...................................................+++++
.........................+++++
writing new private key to 'PRIVATEKEY.key'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:

---

2) Copy+paste the CSR to request a new CA certificate (PKCS7b - *.pem format)

3) Download the certificate in *.pem format to the FTP server

4) Add the private key to the filezilla FTP server (see attached screenshot)

5) The FTP server is unable to read the certificate details (grayed) and connection failed with "Response: 504 TLS handshaking failed!"

[jcstaquet]

screenshot of TLS settings

[Tim Kosse]

The instructions are incomplete. How do turn the CSR into a certificate?

CA certificates are typically self-signed. Did you sign the CA certificate with the generated private key?

[jcstaquet]

You need to send a CSR (certificate signing request) to the Certificate Authority and they send you back a signed certificate. So this is not a self-signed certificate.