Re: SSL certificate chain

2013-09-02 Thread Daniel Lundqvist
So … mysteries solved. I believe. A few things was wrong for me: 1) I had a catch all virtual host using the same certificate file as main site (configured both with a "invalid" server name and default_server for both HTTP and HTTPS) 2) It seems virtual server is also selected based on CN/Subj

Re: SSL certificate chain

2013-09-02 Thread Steve Wilson
On 2013-09-02 11:59, Daniel Lundqvist wrote: I have, it just says only 1 certificate is provided. Here are the test results: https://www.ssllabs.com/ssltest/analyze.html?d=www.malarhojden.nu ... I note that you're using startcom for the certificate, I recall that the intermediate certificate t

Re: SSL certificate chain

2013-09-02 Thread Daniel Lundqvist
I have, it just says only 1 certificate is provided. Here are the test results: https://www.ssllabs.com/ssltest/analyze.html?d=www.malarhojden.nu -- daniel On 1 sep 2013, at 21:43, Sylvia wrote: > Hi. > You can try to run a diagnostics for problem discovery and recommendations > > https://ww

Re: SSL certificate chain

2013-09-01 Thread Axel
Hello, what's your error? you just need to copy both certificates in one file with 'cat' or sth. similar. I use portecle to examine the chained file. Make sure that it's the right ca cert. Regards, Axel Am Sonntag, 1. September 2013, 19:11:04 schrieb Daniel Lundqvist: > Hi, > > I am tryi

Re: SSL certificate chain

2013-09-01 Thread Sylvia
Hi. You can try to run a diagnostics for problem discovery and recommendations https://www.ssllabs.com/ssltest/ Posted at Nginx Forum: http://forum.nginx.org/read.php?2,242410,242417#msg-242417 ___ nginx mailing list nginx@nginx.org http://mailman.ngi

Re: SSL certificate chain

2013-09-01 Thread Daniel Lundqvist
Hi, They are. I get no errors from nginx whatsoever, just that no certificate after the first is never sent. If I change order I get error about key not matching, which is to be expected. -- daniel On 1 sep 2013, at 19:25, Steve Holdoway wrote: > Make sure the server cert it first in the fi

Re: SSL certificate chain

2013-09-01 Thread Steve Holdoway
Make sure the server cert it first in the file, followed by the ca certs. Steve On 1/09/2013, at 11:11 PM, Daniel Lundqvist wrote: > Hi, > > I am trying to configure nginx 1.4.1 (using OpenSSL 1.0.1e) with a PEM > encoded certificate file that contains the whole chain, 3 including Root CA. >

SSL certificate chain

2013-09-01 Thread Daniel Lundqvist
Hi, I am trying to configure nginx 1.4.1 (using OpenSSL 1.0.1e) with a PEM encoded certificate file that contains the whole chain, 3 including Root CA. But I can not get it to work. I have followed documentation at http://nginx.org/en/docs/http/configuring_https_servers.html#chains and http://