Strange SSL behaviour

Hi List,

I am trying to deploy ssl on my apache2 web server using a godaddy signed cert. These are the steps I followed:

Created a key:

# openssl genrsa -out domain.key 2048

Generated a CSR:

# openssl req -new -key domain.key -out domain.csr

Logged into godaddy and re-keyed the existing certificate. ( I went through this procedure a few times, hence the re-keying instead of just signing)

Here is my vhosts.conf entry:

=================================================

SSLCertificateFile /etc/httpd/ssl/xxxxxxxxxx.crt

SSLCertificateKeyFile /etc/httpd/ssl/domain.key

SSLCertificateChainFile /etc/httpd/ssl/gd_bundle-g2-g1.crt

=================================================

I restart the service without error but when I try and connect to the site, the browser returns this warning:

********* uses an invalid security certificate. The certificate is not trusted because it is self-signed.

The certificate is only valid for ******

(Error code: sec_error_untrusted_issuer)

According to the openssl documentation, I am not generating a self signed certificate but it seems that I am.

Any help much appreciated.

Continue reading...