Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #235443

Re: Missing SSL/https root cert(s)? (RESOLVED)

Show all headers | View raw

On Thu, May 20, 2021 at 01:20:08PM +0100, Darac Marjal wrote: 
> A great place to start is the SSL Labs Server Test -                          
> https://www.ssllabs.com/ssltest/analyze.html?d=ojs.lub.lu.se&latest -         
> This will perform various handshakes with a HTTPS server and report all       
> kinds of useful information, including a summary "Grade".                     

Ah, great, thanks to you and to those further down the reply chain!

When I set up our first machine to use a GEANT cert, I wasn't able to
get their "certificate w/ chain" to work, but the "certificate only" was
fine in firefox, so I assumed (...without bothering to actually look in
the file) that the "certificate only" download also included the chain
and went with that, unaware that firefox is "helpful" enough to find the
chain for itself.  So now I revisited that and, apparently, the
"certificate w/ chain" download has the certificate order backwards in
the pem, so I needed the "certificate w/ issuer after" download instead.

Now that I've gotten that straightened out, everything appears to be
working as it should.

-- 
Dave Sherohman

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Missing SSL/https root cert(s)? dave@sherohman.org - 2021-05-20 13:50 +0200
  Re: Missing SSL/https root cert(s)? Darac Marjal <mailinglist@darac.org.uk> - 2021-05-20 14:30 +0200
    Re: Missing SSL/https root cert(s)? Celejar <celejar@gmail.com> - 2021-05-20 15:40 +0200
      Re: Missing SSL/https root cert(s)? Celejar <celejar@gmail.com> - 2021-05-21 14:00 +0200
    Re: Missing SSL/https root cert(s)? (RESOLVED) dave@sherohman.org - 2021-05-21 17:20 +0200

csiph-web