Strange SSL behaviour

[deeed]

Hi List,

I am trying to deploy ssl on my apache2 web server using a godaddy signed cert. These are the steps I followed:

Created a key:
# openssl genrsa -out domain.key 2048

Generated a CSR:
# openssl req -new -key domain.key -out domain.csr

Logged into godaddy and re-keyed the existing certificate. ( I went through this procedure a few times, hence the re-keying instead of just signing)

Here is my vhosts.conf entry:

=================================================
SSLCertificateFile /etc/httpd/ssl/xxxxxxxxxx.crt
SSLCertificateKeyFile /etc/httpd/ssl/domain.key
SSLCertificateChainFile /etc/httpd/ssl/gd_bundle-g2-g1.crt
=================================================

I restart the service without error but when I try and connect to the site, the browser returns this warning:

********* uses an invalid security certificate. The certificate is not trusted because it is self-signed.
The certificate is only valid for ******
(Error code: sec_error_untrusted_issuer)

According to the openssl documentation, I am not generating a self signed certificate but it seems that I am.

Any help much appreciated.

Continue reading...