# Add folder to maker edition webserver **URL:** \ **Category:** Ignition\ **Tags:** ignition80\ **Created:** [December 4, 2021, 8:25pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765 "2021-12-04T20:25:54Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 4, 2021, 8:25pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/1 "2021-12-04T20:25:54Z")
Hi, i am trying to get a free SSL cert for my maker edition, to validate i own the domain they want to access a txt-file under [http://my.domain.ext/.well-known/pki-validation/](http://my.domain.ext/.well-known/pki-validation/) MY ignition is installed on debian but i cannot find the correct folder to put it in, i have tried in several places under the webserver directory, but cannot be access ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [December 4, 2021, 8:43pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/2 "2021-12-04T20:43:12Z")
Did you try to follow IA’s instructions for Let’s Encrypt ? > **[Let's Encrypt Guide for Ignition](https://www.inductiveautomation.com/resources/article/lets-encrypt-guide-for-ignition)** > > Ignition 8.0.3 introduces support for hot-reloading the Gateway’s SSL keystore. This capability enables Ignition to play well with services such as Let’s Encrypt which provide for automatic SSL certificate management. This article walks through one... ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 4, 2021, 8:45pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/3 "2021-12-04T20:45:44Z")
No, didnt know there was one, but in this case i am using [zerossl.com](http://zerossl.com) Similar approach as lets. I managed to get the cname verification going. So i got my certificate.crt and ca\_bundle.crt But i get stuck on the last(?) step, i dont seem to have the 3rd file ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/7/47a9118dded2a288721a5bbaf5aa1b9253d18d05.png) ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [December 4, 2021, 9:34pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/4 "2021-12-04T21:34:24Z")
That suggests you need to move your intermediate to your CA. Or possibly your intermediate has multiple concatenated, with the CA in the group. ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 12:10pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/5 "2021-12-06T12:10:55Z")
The problem in this case is that neither i nor zerossl has this intermediate, and i have never had to use a 3rd cert, only have previously used the certificate it self and the ca\_bundle cert. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [December 6, 2021, 1:37pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/6 "2021-12-06T13:37:19Z")
How many certs are in your ca\_bundle? Have you tried leaving the intermediate empty? Have your tried pulling out the first cert in ca\_bundle to be the intermediate, then supplying the remaining in ca\_bundle as step 4? ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 6:31pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/7 "2021-12-06T18:31:02Z")
Cant get past intermidiate, else i would tried that at first. both the cert and bundly only has one in each file. Might aswell go with lets encrypt if it works. ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 7:10pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/8 "2021-12-06T19:10:53Z")
Its worse with lets encrypt. it asks for a 4th and 5th file. and the guide was not helpfull at all, left so much information gone. Might aswell skip ssl then. Because ignition just keeps asking for more and more files that doesnt exist… ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/6/8634849f8e5fb14d2c61a464a553dec1c0525795.png) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [December 6, 2021, 7:15pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/9 "2021-12-06T19:15:47Z")
Can you let us take a look at the certs you’re trying to upload? As long as you don’t upload the private keys it’s all safe to share. ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 7:19pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/10 "2021-12-06T19:19:29Z")
Certs without priv, forum doesnt allow 7z extention, might want to add that 😃 [certs.zip](https://forum.inductiveautomation.com/uploads/short-url/8zfoFf87JlQaZFcZMh92i7q8rEA.zip) (7.9 KB) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [December 6, 2021, 7:27pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/11 "2021-12-06T19:27:12Z")
Ok, so the problem here is exactly what Ignition is telling you: you’re missing the root CA. It’s `CN=DST Root CA X3,O=Digital Signature Trust Co.`, and it’s not included in any of those files. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [December 6, 2021, 7:30pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/12 "2021-12-06T19:30:22Z")
I wonder if problem has something to do with [this](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/)… ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 7:32pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/13 "2021-12-06T19:32:21Z")
Probably, im reading around in the forum, but that seems solved ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [December 6, 2021, 7:34pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/14 "2021-12-06T19:34:56Z")
Well the problem you’re running into is the chain you have has the `ISRG Root X1` certificate indicating it’s issued by `DST Root CA X3`, and you don’t have that cert in the chain, and the web UI is dutifully requesting that you upload the next cert. I’m not sure what the right move here is… `DST Root CA X3` is expired, so I’m not sure adding it will help or not. Maybe doing Lets Encrypt via the web UI doesn’t work quite right at the moment. ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 7:36pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/15 "2021-12-06T19:36:25Z")
I got the pem-files via the certbot on debian, but its probably the same that would come via web interface of lets encrypt. ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 7:44pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/16 "2021-12-06T19:44:25Z")
I took the root cert from the browsers storage, the continue button enabled, but now i get this error ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/2/5267aa59761e79542609ddf8d9260ddb0fe80682.png) ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [December 6, 2021, 7:49pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/17 "2021-12-06T19:49:32Z")
do you have any exceptions in your gateway logs related to this error? ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 7:51pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/18 "2021-12-06T19:51:54Z")
Probably because of this > Caused by: java.security.KeyStoreException: Certificate chain is not valid ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [December 6, 2021, 7:54pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/19 "2021-12-06T19:54:36Z")
can you post the full stack trace? (click the little `+` icon next to the error message in the logs) ---
**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\ **Post date:** [December 6, 2021, 7:55pm UTC](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765/20 "2021-12-06T19:55:21Z")
I tried to take the new ISRG X1 root cert from here, but gets a duplicate message > **[Chain of Trust - Let's Encrypt](https://letsencrypt.org/certificates/)** > > Root Certificates Our roots are kept safely offline. We issue end-entity certificates to subscribers from the intermediates in the next section. For additional compatibility as we submit our new Root X2 to various root programs, we have also... [Next page](https://forum.inductiveautomation.com/t/add-folder-to-maker-edition-webserver/53765.md?page=2)