Intermediate Certificate (chained certificate)

2 posts / 0 new
Last post
#1 Thu, 01/22/2009 - 04:39
Maurizio1230

Intermediate Certificate (chained certificate)

Hi all,

You will need to install the Intermediate CA certificates in order for browsers to trust your certificate. The Intermediate CA certificates are contained within the 'ca-bundle' file that was attached to your email in the *.zip file we sent you (this should be named 'yourSERVERNAME.ca-bundle'), or click to download the PositiveSSL ca-bundle file In the relevant 'Virtual Host' section for your site, you will need to do the following to get this file correctly referenced: a. First, copy the 'yourSERVERNAME.ca-bundle' file to the same directory as the certificate and key files. As a reminder, in this example we called the directory '/etc/ssl/crt/'. b. Next, add the following line to the SSL section of the 'httpd.conf' file. Again we assume that '/etc/ssl/crt/' is the directory to where you have copied the intermediate CA file. If the line already exists amend it to read the following: SSLCertificateChainFile /etc/ssl/crt/yourSERVERNAME.ca-bundle c. If you are using a different location and different certificate file names, you will need to change the path and filename to reflect the path and filename that you are using. The SSL section of the updated config file should now read: SSLCertificateFile /etc/ssl/crt/yourDOMAINNAME.crt SSLCertificateKeyFile /etc/ssl/crt/private.key SSLCertificateChainFile /etc/ssl/crt/yourSERVERNAME.ca-bundle d. Save your 'config' file and restart Apache.

How can I do it on virtualmin? I paste key.ca-bundle in /home/myhome/ Now where have I to add this?

SSLCertificateFile /home/myhome/ssl.cert SSLCertificateKeyFile /home/myhome/ssl.key SSLCertificateChainFile /home/myhome/key.ca-bundle

Thank you very much

Wed, 02/04/2009 - 13:27
ronald
ronald's picture

you would add this to your httpd.conf - <virtualhost> container of the specific domain...

you can also do this by going to webmin-apache servers-click the domain/virtual server-click edit directives-add them there-restart apache

Topic locked