On Thu, May 20, 2021 at 01:20:08PM +0100, Darac Marjal wrote: > A great place to start is the SSL Labs Server Test - > https://www.ssllabs.com/ssltest/analyze.html?d=ojs.lub.lu.se&latest - > This will perform various handshakes with a HTTPS server and report all > kinds of useful information, including a summary "Grade".
Ah, great, thanks to you and to those further down the reply chain! When I set up our first machine to use a GEANT cert, I wasn't able to get their "certificate w/ chain" to work, but the "certificate only" was fine in firefox, so I assumed (...without bothering to actually look in the file) that the "certificate only" download also included the chain and went with that, unaware that firefox is "helpful" enough to find the chain for itself. So now I revisited that and, apparently, the "certificate w/ chain" download has the certificate order backwards in the pem, so I needed the "certificate w/ issuer after" download instead. Now that I've gotten that straightened out, everything appears to be working as it should. -- Dave Sherohman
