<p>I have the ssl certificate zip file and the <code>privatekey.key</code> file. In total I have the certificate file <code>.crt</code> and another <code>.crt</code> with the name <code>bundle.crt</code> and a <code>.pem</code> file along with the private key with an extension <code>.key</code>.</p>
<p>Now I am trying to use it to create a secret in istio using these files. I am able to create a secret with these files (<code>thecertificate.cert</code> and the <code>privatekey.key</code> and not using the <code>.pem</code> and <code>bundle.cert</code> file) but then when I use in my istio ingress gateway configuration and test it, I get an error on Postman:</p>
<pre><code>SSL Error: Unable to verify the first certificate.
</code></pre>
<p>Here are the details:</p>
<pre><code># kubectl create -n istio-system secret tls dibbler-certificate --key=privatekey.key --cert=thecertificate.crt

# kubectl get secrets -n istio-system
</code></pre>
<p>output: <strong>dibbler-certificate</strong></p>
<p>gateway:</p>
<pre><code>apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: dibbler-gateway
spec:
  selector:
    istio: ingressgateway
  servers:
  servers:
  - port:
      number: 443
      name: https
      protocol: HTTPS
    tls:
      mode: SIMPLE
      # serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
      # privateKey: /etc/istio/ingressgateway-certs/tls.key
      credentialName: dibbler-certificate
    hosts:
    - &quot;test.ht.io&quot; # domain name goes here
</code></pre>
<p>Any help is appreciated. Thanks</p>

<p>Your config files looks good. I have found very similar problem on <a href="https://discuss.istio.io/t/postman-ssl-error-unable-to-verify-the-first-certificate/12471" rel="nofollow noreferrer">discuss.istio.io</a>. The problem is resolved by following:</p>
<blockquote>
<p>Two servers was an error too but the important thing is I had to concatenate the godaddy ssl certificate.crt &amp; the bundle.crt and then used the private key to create a secret. Now it’s workng fine.</p>
</blockquote>
<p>You can also see <a href="https://community.postman.com/t/unable-to-verify-first-cert-issue-enable-ssl-cert-verification-off/14951/5" rel="nofollow noreferrer">this postman page</a>.</p>
