Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread dE
On 10/08/14 10:18, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 2:27 PM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: On 10/08/14 05:18, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 1:59 AM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: On 10/07/14

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread dE
On 10/08/14 10:19, Igor Cicimov wrote: You can find more about openssl tool set here: https://www.openssl.org/docs/apps/s_client.html, its perfect for ssl troubleshooting. By the way, did you import the CA_chain.pem in the browsers? I thought browser only needs to have the self

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Igor Cicimov
On Wed, Oct 8, 2014 at 6:03 PM, dE de.tec...@gmail.com wrote: On 10/08/14 10:18, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 2:27 PM, dE de.tec...@gmail.com wrote: On 10/08/14 05:18, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 1:59 AM, dE de.tec...@gmail.com wrote: On 10/07/14

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Igor Cicimov
On Wed, Oct 8, 2014 at 6:05 PM, dE de.tec...@gmail.com wrote: On 10/08/14 10:19, Igor Cicimov wrote: You can find more about openssl tool set here: https://www.openssl.org/docs/apps/s_client.html, its perfect for ssl troubleshooting. By the way, did you import the CA_chain.pem in the

Re: [users@httpd] Apache side issue.....

2014-10-08 Thread Bill Vance
Ok, where do I set it to, on? On Tue, 7 Oct 2014, Pankaj Singh wrote: Server indexing is set   to off, you can upload any pages to test with. Thanks Pankaj Singh On Tue, Oct 7, 2014 at 11:43 PM, Bill Vance p...@xpresso.seaslug.org wrote: Howdy; I'm using kubuntu 12.04,

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread dE
On 10/08/14 14:35, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 6:05 PM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: On 10/08/14 10:19, Igor Cicimov wrote: You can find more about openssl tool set here: https://www.openssl.org/docs/apps/s_client.html, its

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread dE
On 10/08/14 14:33, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 6:03 PM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: On 10/08/14 10:18, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 2:27 PM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: On 10/08/14

[users@httpd] Intended use of SSLCACertificateFile/SSLCACertificatePath

2014-10-08 Thread dE
In Apache 2.2, these can be used instead of SSLCertificateChainFile, but from it's documentation and mentioning of clients, it looks like this's intended to be used in a situation where the client sends the server certificates for it's own authentication. This's what I get from -- These are

Re: [users@httpd] Intended use of SSLCACertificateFile/SSLCACertificatePath

2014-10-08 Thread Eric Covener
On Wed, Oct 8, 2014 at 6:46 AM, dE de.tec...@gmail.com wrote: Are all SSLCA* directives used for the same purpose (where client sends the public key for it's authentication)? ​No.​

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Igor Cicimov
On 08/10/2014 9:16 PM, dE de.tec...@gmail.com wrote: On 10/08/14 14:33, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 6:03 PM, dE de.tec...@gmail.com wrote: On 10/08/14 10:18, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 2:27 PM, dE de.tec...@gmail.com wrote: On 10/08/14 05:18, Igor Cicimov

Re: [users@httpd] Intended use of SSLCACertificateFile/SSLCACertificatePath

2014-10-08 Thread dE
On 10/08/14 16:53, Eric Covener wrote: On Wed, Oct 8, 2014 at 6:46 AM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: Are all SSLCA* directives used for the same purpose (where client sends the public key for it's authentication)? ​No.​ Thanks for clarifying that.

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread dE
On 10/08/14 17:53, Igor Cicimov wrote: On 08/10/2014 9:16 PM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: On 10/08/14 14:33, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 6:03 PM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: On 10/08/14 10:18, Igor Cicimov

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Eric Covener
On Wed, Oct 8, 2014 at 12:00 PM, dE de.tec...@gmail.com wrote: intermediate.pem must get installed automatically in the browsers (at least in FF), but instead these browsers don't see the certificate. ​No, servers are expected to transmit the intermediate certificates.

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread dE
On 10/08/14 21:36, Eric Covener wrote: On Wed, Oct 8, 2014 at 12:00 PM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: intermediate.pem must get installed automatically in the browsers (at least in FF), but instead these browsers don't see the certificate. ​No,

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread Igor Cicimov
On 09/10/2014 3:46 AM, dE de.tec...@gmail.com wrote: On 10/08/14 21:36, Eric Covener wrote: On Wed, Oct 8, 2014 at 12:00 PM, dE de.tec...@gmail.com wrote: intermediate.pem must get installed automatically in the browsers (at least in FF), but instead these browsers don't see the

Re: [users@httpd] Too many vhosts?!?!

2014-10-08 Thread Paul Silevitch
I had a similar issue years ago with a large number of vhosts and apache hanging (apache 2.2 prefork mpm on linux like you). The problem for me was with the number of Listen directives. When I cut the list down, everything worked. Do you have a lot of Listen directives? If so, maybe part of

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-08 Thread dE
On 10/09/14 03:29, Igor Cicimov wrote: On 09/10/2014 3:46 AM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: On 10/08/14 21:36, Eric Covener wrote: On Wed, Oct 8, 2014 at 12:00 PM, dE de.tec...@gmail.com mailto:de.tec...@gmail.com wrote: intermediate.pem must get installed