Strange SSL behaviour

[Guest deeed]

Hi List,

 

I am trying to deploy ssl on my apache2 web server using a godaddy signed cert. These are the steps I followed:

 

Created a key:

# openssl genrsa -out domain.key 2048

 

Generated a CSR:

# openssl req -new -key domain.key -out domain.csr

 

Logged into godaddy and re-keyed the existing certificate. ( I went through this procedure a few times, hence the re-keying instead of just signing)

 

Here is my vhosts.conf entry:

 

=================================================

SSLCertificateFile /etc/httpd/ssl/xxxxxxxxxx.crt

SSLCertificateKeyFile /etc/httpd/ssl/domain.key

SSLCertificateChainFile /etc/httpd/ssl/gd_bundle-g2-g1.crt

=================================================

 

I restart the service without error but when I try and connect to the site, the browser returns this warning:

 

********* uses an invalid security certificate. The certificate is not trusted because it is self-signed.

The certificate is only valid for ******

(Error code: sec_error_untrusted_issuer)

 

According to the openssl documentation, I am not generating a self signed certificate but it seems that I am.

 

Any help much appreciated.

 

Continue reading...