What distro are you running?  On Red Hat et al, the SSL configuration is
usually found in /etc/httpd/conf.d/ typically as ssl.conf.

Curt

On Fri, Feb 26, 2010 at 9:17 AM, Bruce W. Martin <marti...@gmail.com> wrote:

> I have a server with two NICs on different IP addresses hosting two Virtual
> hosts on Apache using SSL certificates from GeoTrust.
>
> One of the sites (pacs) has had a certificate for the last few years and
> has been renewed a couple of times and works just fine.
> The other site (svn) had a certificate that had expired. I put in a self
> signed certificate that had been created a few years ago but it was decided
> that we needed to get a proper certificate for the site. On Monday (2/22) I
> went through the process of creating a new certificate and get it installed.
> I had a couple of issues with SElinux because I originally created the key
> outside the /etc/httpd/conf directory and moved it to the proper directory
> and SElinux balked at allowing the server to start until I told SElinux that
> the file was OK. Finally restarted the http daemon and went to the site to
> make sure everything was working fine. The site gives the dreaded "This site
> is not trusted page" with a self signed certificate with the proper common
> name and a Validity date of 2/18/10, four days before I started this
> process. I have had the certificate reissued twice and confirmed that the
> httpd.conf file that I am editing was the one used to start the daemon. I
> cannot find a certificate that matches what is being served up by the page.
> I have confirmed IP addresses and hostname point to the right machine. I
> have been in contact with GeoTrust about this and run several google
> searches and combed through Apache and SSL docs and FAQs but nothing has
> shed a light on solving this problem.
>
> Has anyone ever seen this kind of thing or has suggestions on something
> else to look for or try?
>
> Thanks,
>
> Bruce
>
>
> --
> Bruce W. Martin, KQ4TV
> Mt. Juliet, TN
> EM66sf
>
> --
> You received this message because you are subscribed to the Google Groups
> "NLUG" group.
> To post to this group, send email to nlug-talk@googlegroups.com
> To unsubscribe from this group, send email to
> nlug-talk+unsubscr...@googlegroups.com<nlug-talk%2bunsubscr...@googlegroups.com>
> For more options, visit this group at
> http://groups.google.com/group/nlug-talk?hl=en
>

-- 
You received this message because you are subscribed to the Google Groups 
"NLUG" group.
To post to this group, send email to nlug-talk@googlegroups.com
To unsubscribe from this group, send email to 
nlug-talk+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/nlug-talk?hl=en

Reply via email to