Re: AW: [users@httpd] ssl setup checking

2013-10-09 Thread Robin Becker
So I have my cert the GS root cert and the intermediate cert pointed at by the apache conf like this SSLCertificateFile //etc/certs/myhost.com.crt SSLCertificateKeyFile //etc/certs/myhost.key SSLCACertificateFile //etc/certs/globalsign-root-ca-rc2.crt SSLCertificateCha

AW: AW: [users@httpd] ssl setup checking

2013-10-09 Thread Fiedler Roman
> Von: Robin Becker [mailto:ro...@reportlab.com] > > On 09/10/2013 13:15, Fiedler Roman wrote: > .. > > > > Unless you want to use client certificates from globalsign, > "SSLCACertificateFile" will not make sense. See [1] > > > > Roman > > > > [1] > http://httpd.apache.org/docs/2.2/mod/mod

Re: AW: [users@httpd] ssl setup checking

2013-10-09 Thread Robin Becker
On 09/10/2013 13:15, Fiedler Roman wrote: .. Unless you want to use client certificates from globalsign, "SSLCACertificateFile" will not make sense. See [1] Roman [1] http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcacertificatefile .. This page https://support.globalsi

AW: [users@httpd] ssl setup checking

2013-10-09 Thread Fiedler Roman
> Von: Robin Becker [mailto:ro...@reportlab.com] > > On 07/10/2013 20:26, Yehuda Katz wrote: > > OpenSSL supports each of the options you need (one at a time). > > http://www.cyberciti.biz/faq/test-ssl-certificates-diagnosis-ssl-certificate/ > > Just add the server to the hosts file. > > > > - Y >

Re: [users@httpd] ssl setup checking

2013-10-09 Thread Robin Becker
On 07/10/2013 20:26, Yehuda Katz wrote: OpenSSL supports each of the options you need (one at a time). http://www.cyberciti.biz/faq/test-ssl-certificates-diagnosis-ssl-certificate/ Just add the server to the hosts file. - Y .. thanks for the above, certainly bits of my setup are OK, but now

Re: [users@httpd] ssl setup checking

2013-10-07 Thread Yehuda Katz
OpenSSL supports each of the options you need (one at a time). http://www.cyberciti.biz/faq/test-ssl-certificates-diagnosis-ssl-certificate/ Just add the server to the hosts file. - Y On Mon, Oct 7, 2013 at 5:22 AM, Robin Becker wrote: > I'm using multi ipaddress setup with virtual hosts to su

[users@httpd] ssl setup checking

2013-10-07 Thread Robin Becker
I'm using multi ipaddress setup with virtual hosts to support different certificates. For one of the hosts we currently don't have DNS pointing to the right ip so I edited my hosts file to point myextended.host.com at the relevant ip. This host has a GlobalSign extended cert. We want to check