----- Original Message ----- From: "Farhan Ahmed" <[email protected]>
To: <[email protected]>
Sent: Wednesday, February 03, 2010 8:33 AM
Subject: [Pound Mailing List] Chain Certificate


I have installed a new entrust SSL certificate for a site. It looks
like that the root certificate is now present in all the browsers and
I need to install the Chain certificate for it. I am using the
following but it seems like the users are still getting prompted for
the untrusted certificate.

        Cert    "/usr/local/openssl/certificate.cert.pem"
        CAlist "/usr/local/openssl/ca.crt"


I had to install a new chained cert recently and I had to have them in this order for it to work, other orders did not work:

-----BEGIN PRIVATE KEY-----
Server key (pasted in the new key here)
-----END PRIVATE KEY-----

-----BEGIN CERTIFICATE-----
Server certificate
-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----
Intermediate CA
-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----
Root CA
-----END CERTIFICATE-----



Thanks,
Farhan

--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.



--------------------------------------------------------------------------------



Internal Virus Database is out of date.
Checked by AVG - www.avg.com
Version: 8.5.421 / Virus Database: 270.14.16/2435 - Release Date: 10/14/09 06:33:00


--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

Reply via email to