PDA

View Full Version : SSL Cert install not recognized? Browser shows self-signed



codeman05
06-23-2008, 06:49 PM
I recently purchased a Thawte SSL123 certificate. I was sent the Key and Certificate and passed them in according to the DA help guide.

However, anytime I go to the "secured" website, I get the following error in firefox:



www.***********.com uses an invalid security certificate.

The certificate is not trusted because it is self signed.
The certificate is only valid for localhost

(Error code: sec_error_ca_cert_invalid)


Which makes me think that DA didn't even switch me over the purchased cert.
The site is running on a dedicated IP and the Key and Cert are posted one after the other without any black lines in between.

nobaloney
06-23-2008, 07:25 PM
Check here (http://homepages.tesco.net./~J.deBoynePollard/FGA/dont-obscure-your-dns-data.html).

Jeff

codeman05
06-23-2008, 08:10 PM
https://www.ainsworthsolutions.com/

nobaloney
06-23-2008, 11:42 PM
Is the site at IP# 209.223.35.2?

Is that a dedicated IP for just this site?

If not, fix that first.

Then ...

Check the user level httpd.conf file at:

/usr/local/directadmin/data/users/USERNAME/httpd.conf
first search for the line:

<VirtualHost 209.223.35.2:443>
and then under that scroll down and look for (before the next VirtualHost line), lines beginning with SSLCertificateFile, SSLCertificateKeyFile, and any CA file as well, if you've installed one.

if those exist, then make sure the files exist and have the correct contents, and then try restarting httpd.

If none of these fix the problem, then you may need professional help from an experienced Systems Administrator.

Jeff

codeman05
06-24-2008, 06:07 AM
I believe DA somehow got corrupted upon installation. Did a fresh reinstall and everything is working as it should now.

Thanks for the insight.