Hello Apache Community,

I have configured SSL on Apache HTTP Server running on CentOS 9.

Environment:
- Operating System: CentOS 9
- Apache Version: 2.4.62

Certificate setup:
- Private key generated on the server
- CSR generated on the server and signed by our internal CA (Key Manager Plus)
- Server certificate (.crt) issued successfully

Issue:
I did not receive the certificate chain (intermediate certificates). Without 
the chain, browsers may not fully trust the site, and I want to ensure the SSL 
configuration is complete and secure.

Questions:
1. What is the recommended way to obtain the certificate chain from an internal 
CA such as Key Manager Plus?
2. Is it acceptable to run Apache securely using only the server certificate 
and private key if the chain is not available?
3. Could the missing chain be the reason the site appears as not fully secure 
in browsers?

Any guidance or best practices would be greatly appreciated.

Thank you.

Reply via email to