Karanbir Singh wrote: > Hi, > > Kenneth Porter wrote: >> FYI: Firefox puts up the big scary warning when visiting, due to the >> combination of self-signed and expired certificate for the site. > > I did get the certs last year and set them up, but someone kept removing > and disabling them. So am not sure what the state of play is. If we are > indeed going to use verifiable certs then I can renew the one we have.
The wrong certfile (and keyfile) were used: [EMAIL PROTECTED] tls]# ls -l certs/*rpmrepo* -rw------- 1 root root 4604 Mar 20 22:54 certs/rpmrepo-chain.crt -rw------- 1 root root 1761 Mar 20 22:54 certs/rpmrepo.crt -rw------- 1 root root 944 Jul 30 2007 certs/www.rpmrepo.org.crt The last one is self signed (and expired) and was used in /etc/vhosts.d/rpmrepo-ssl.conf. Or lets say that it *was* self signed, I just removed it. rpmrepo.crt on the other hand is the GoDaddy certificate which now is in use again. Ralph
pgpVLC9sVAGBj.pgp
Description: PGP signature
_______________________________________________ users mailing list [email protected] http://lists.rpmforge.net/mailman/listinfo/users
