Hello,

Just for the archive of the mailing list, the problem is now solved,
thanks to some help from Entrust and Cobalt.

The solution is as follows:

1. Copy the chain certificate file provided by entrust to:
/etc/httpd/conf/entrustchaincert.txt (or another convenient location) 

2. Edit the httpd.conf file so that there is a line in the SSL section 
as:

SSLCACertificateFile /etc/httpd/conf/entrustchaincert.txt

3. Restart httpd.

Now when opening in old versions of Netscape or IE, it contains the
correct certification path (Thawte-->Entrust-->my website), and there
are no ugly warnings.

By the way, for the instructions at:

http://www.entrust.net/tech/apachemod_ssl/install.htm#chaincert

I did not have to do any of the steps 1 through 7. I just needed to add
the above line (and install using the Cobalt RAQ admin screens, pasting
in the certificate for the website itself). 

Hopefully this works in a RAQ4 too, so that other Tucows resellers have
no problems installing the Tucows/Entrust web certificates.

If you want to see what they look like, try going to:

https://www.loffs.com/

There are no warnings at all, even with older browsers. Woohoo!! :)

Sincerely,

George Kirikos
http://www.kirikos.com/

__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/

Reply via email to