Hi, SSLCertificateFile and SSLCertificateKeyFile are for your certificate and key - they can be self signed or signed by a CA. If they are signed by a CA, you shoud use the SSLCertificateChainFile directive for the root and possibly the intermidiate certificate.
You should check out the manual: http://httpd.apache.org/docs/2.0/ssl/ The faq is very helpful, but take some time to read the hole thing. Take care [EMAIL PROTECTED] wrote: > Hello Bruno, > > So...what is the CA come from the Web ? > > SSLCertificateFile /etc/pki/tls/certs/localhost.crt > SSLCertificateKeyFile /etc/pki/tls/private/localhost.key > > Is it a sample of Root CA ? > > Edward. > > Bruno Teixeira wrote: > >> Edward, >> >> the SSLCertificateChainFile directive should indicate a file with both >> the root and intermediate certificates. >> >> http://certs.ipsca.com/support >> >> Take care. >> >> Bruno Teixeira >> >> [EMAIL PROTECTED] wrote: >> >>> >>> -------- Original Message -------- >>> Subject: Root CA ( SSL ) of Web Service >>> Date: Wed, 21 Feb 2007 18:11:51 +0800 >>> From: [EMAIL PROTECTED] >>> Reply-To: For users of Fedora <[EMAIL PROTECTED]> >>> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> >>> >>> >>> >>> Dear All, >>> >>> For apache 2.x, which command Syntax for Root CA ? >>> >>> SSLCertificateFile /etc/pki/tls/certs/localhost.crt >>> SSLCertificateKeyFile /etc/pki/tls/private/localhost.key >>> #SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt >>> #SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt >>> >>> Edwad. >>> >>> -- >>> fedora-list mailing list >>> [EMAIL PROTECTED] >>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list >>> >>> >> >> --------------------------------------------------------------------- >> The official User-To-User support forum of the Apache HTTP Server >> Project. >> See <URL:http://httpd.apache.org/userslist.html> for more info. >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> " from the digest: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> > > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: [EMAIL PROTECTED] > " from the digest: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]