Lutz, when I try to access your site with Internet Explorer 5.5, IE tells me that it cannot verify the certificate. German error message is: Das Zertifikat wurde von einer Firma ausgestellt, die Sie nicht als vertrauenswürdig eingestuft haben. Untersuchen Sie das Zertifikat um festzustellen, ob Sie der ausstellenden Institution vertrauen möchten. > -----Ursprüngliche Nachricht----- > Von: Lutz Jaenicke [SMTP:[EMAIL PROTECTED]] > Gesendet am: Freitag, 18. Mai 2001 10:50 > An: [EMAIL PROTECTED] > Betreff: Re: SSLCertificateChain file for Intermediate CA > > On Fri, May 18, 2001 at 11:58:02AM +1200, Damon Maria wrote: > > Since I haven't gotten too much of a response yet (expect for thanks to > > Juha) I'll post my VirtualHost in httpd.conf, which I probably should > > have done in the first place. > > > > If I uncomment the SSLCertificateChainFile line then the following > > appears in the log and apache won't start... > > > > "[error] mod_ssl: Init: (www.motorweb.co.nz:443) Failed to configure CA > > certificate chain!" > > > > I've copied my original message at the bottom of this one which contains > > the contents of /etc/httpd/conf/ssl.crt/intermediate_ca.crt (as I got it > > from Verisign's site). > > Without going through mod_ssl's source: did you try to put the complete > chain into the ChainFile? The server cert is in its own file. For my > server (www.aet.tu-cottbus.de) I have an intermediate and a root CA > certificate. Both are concatenated together into the chain file. > > With respect to the error message, mod_ssl can write more messages > than that into e.g. an ssl_engine_log. Did you check all possible > logfiles? > > Best regards, > Lutz > -- > Lutz Jaenicke [EMAIL PROTECTED] > BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ > Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 > Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153 > ______________________________________________________________________ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
