LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Could not verify this certificate for unknown reason (https://www.linuxquestions.org/questions/linux-newbie-8/could-not-verify-this-certificate-for-unknown-reason-890372/)

tayzar 07-07-2011 02:03 AM

Could not verify this certificate for unknown reason
 
I am testing about using SSL Certificate in apache web server using Ubantu 10.04.2 (64 bit edition).
And I insert SSLcertificate and private.key file into "default-ssl" file in "sites-available" folder.
But when I call the website, SSL certificate show "Could not verify this certificate for unknown reason".

Configuration in "default-ssl" is shown below

SSLCertificateFile /etc/apache2/ssl/mysite_com.cer
SSLCertificateKeyFile /etc/apache2/ssl/privatekey.key
SSLCACertificateFile /etc/apache2/ssl/SCAONE.cer
SSLCACertificateFile /etc/apache2/ssl/ROOTCA.cer

Please give me some advices if someone got how to solve this error.
thanks
tayzar

bathory 07-07-2011 08:08 AM

Hi and welcome to LQ,

Is is a self-signed certificate? If so it should give you just a warning that if you want to accept the certificate or not.
Anyway, comment out the last 2 lines and restart apache to see if it works

Regards

sandwormusmc 07-07-2011 12:19 PM

Quote:

Originally Posted by tayzar (Post 4407523)
I am testing about using SSL Certificate in apache web server using Ubantu 10.04.2 (64 bit edition).
And I insert SSLcertificate and private.key file into "default-ssl" file in "sites-available" folder.
But when I call the website, SSL certificate show "Could not verify this certificate for unknown reason".

Configuration in "default-ssl" is shown below

SSLCertificateFile /etc/apache2/ssl/mysite_com.cer
SSLCertificateKeyFile /etc/apache2/ssl/privatekey.key
SSLCACertificateFile /etc/apache2/ssl/SCAONE.cer
SSLCACertificateFile /etc/apache2/ssl/ROOTCA.cer

Please give me some advices if someone got how to solve this error.
thanks
tayzar

You may have to convert your .cer to a PEM certificate ...

Code:

openssl x509 -inform der -in certificate.cer -out certificate.pem
For more information, including some diagnostic commands you can try on the various certs/keys, check out http://www.sslshopper.com/article-mo...-commands.html.

tayzar 07-07-2011 10:55 PM

Quote:

Originally Posted by bathory (Post 4407778)
Hi and welcome to LQ,

Is is a self-signed certificate? If so it should give you just a warning that if you want to accept the certificate or not.
Anyway, comment out the last 2 lines and restart apache to see if it works

Regards

Hi,
I am using SSL Certificate issued from ROOTCA and CA.
When I tested it, the browser don't know the certificate Chain.
How should i give certificate chain in "SSL Certificate path".
thanks
tayzar

bathory 07-08-2011 03:52 AM

Quote:

I am using SSL Certificate issued from ROOTCA and CA.
You should import the 2 CA certs in your browser

tayzar 07-10-2011 10:02 PM

Quote:

Originally Posted by bathory (Post 4408605)
You should import the 2 CA certs in your browser

Thanks for the advice. It is Ok for the problem.
But I don't want to import the RootCA and CA certs in client browser.
I want to get Certificate Chain directly when I call the website like IIS.
So, how do I import the Certificate Chain in Server.

thanks you very much!
Looking forwards to your answer.

bathory 07-11-2011 08:18 AM

Hi,

You may take a look at this and use the SSLCertificateChainFile with the final certificate

Regards


All times are GMT -5. The time now is 11:44 PM.