Hello,
Just for the archive of the mailing list, the problem is now solved,
thanks to some help from Entrust and Cobalt.
The solution is as follows:
1. Copy the chain certificate file provided by entrust to:
/etc/httpd/conf/entrustchaincert.txt (or another convenient location)
2. Edit the httpd.conf file so that there is a line in the SSL section
as:
SSLCACertificateFile /etc/httpd/conf/entrustchaincert.txt
3. Restart httpd.
Now when opening in old versions of Netscape or IE, it contains the
correct certification path (Thawte-->Entrust-->my website), and there
are no ugly warnings.
By the way, for the instructions at:
http://www.entrust.net/tech/apachemod_ssl/install.htm#chaincert
I did not have to do any of the steps 1 through 7. I just needed to add
the above line (and install using the Cobalt RAQ admin screens, pasting
in the certificate for the website itself).
Hopefully this works in a RAQ4 too, so that other Tucows resellers have
no problems installing the Tucows/Entrust web certificates.
If you want to see what they look like, try going to:
https://www.loffs.com/
There are no warnings at all, even with older browsers. Woohoo!! :)
Sincerely,
George Kirikos
http://www.kirikos.com/
__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/