Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: SSL Certificate Installation problem
Top Forums Web Development SSL Certificate Installation problem Post 302274952 by Trusevich on Thursday 8th of January 2009 06:08:58 PM
Old 01-08-2009
SSL Certificate Installation problem
Hello everybody
Hope somebody can help me

I'm trying to install SSL Certificate on Apache/mod_ssl on Linux with Zend for Oracle.

I bought and downloaded certificate from certificate from Network Solutions. Than I followed the instructions to the dot.

I created a directory for certificate
Code:
[root@online ssl]# pwd
/usr/local/Zend/apache2/ssl
[root@online ssl]# ls -la
total 40
drwxrwxrwx   2 root root 4096 Jan  8 17:14 .
drwxr-xr-x  18 root root 4096 Jan  6 11:41 ..
-rwxrwxrwx   1 root root 3199 Jan  8 17:12 Apache_Plesk_Install.txt
-rwxrwxrwx   1 root root  887 Jan  8 17:10 myserver.key
-rwxrwxrwx   1 root root 1776 Jan  8 16:58 ONLINE.ODL.COM.crt

Than I modified httpd.conf file to add
Code:
SSLCertificateFile /usr/local/Zend/apache2/ssl/ONLINE.ODL.COM.crt
SSLCertificateKeyFile /usr/local/Zend/apache2/ssl/myserver.key
SSLCertificateChainFile /usr/local/Zend/apache2/ssl/Apache_Plesk_Install.txt

Than I restarted apache (and the server too). Than go to the my website and it still shows security alert, and old (homegenerated by previous guy) certificate info. Like nothing changed.

The funny thing is, I did a search for *.crt files on my server and found this directory, with the date exactly matching the start date that certificate window in IE shows (March 21). It sure looks like that's what outside world see instead of the right certificate:
Code:
[root@online ssl]# ls -la /usr/local/Zend/apache2/conf/ssl.key/
total 100
drwxr-xr-x  4 root root 4096 Mar 21  2007 .
drwxr-xr-x  3 root root 4096 Jan  8 17:21 ..
-rw-r--r--  1 root root 4720 Mar 21  2007 ca.crt
-rw-r--r--  1 root root 2151 Mar 21  2007 class3.crt
drwxr-xr-x  2 root root 4096 Mar 21  2007 new
-rw-r--r--  1 root root 1172 Mar 21  2007 rootca.crt
-rw-r--r--  1 root root 2569 Mar 21  2007 root.crt
drwxr-xr-x  2 root root 4096 Mar 21  2007 save
-rw-r--r--  1 root root 1732 Mar 21  2007 server.crt
-rw-r--r--  1 root root 1058 Mar 21  2007 server.csr
-r--r--r--  1 root root 1675 Mar 21  2007 server.key
-rw-r--r--  1 root root 1743 Mar 21  2007 server.key.original

What am I missing?
 

9 More Discussions You Might Find Interesting

1. Web Development

SSL certificate

Dear All Anyone know how to issue two different certification on apache virtualhost fyi i have one virtualhost eg 69.192.1.25:443 already signed with verisign how can i configure another virtualhost 69.192.1.25:443 which signing with another certificate which self signing. i search net not... (1 Reply)
Discussion started by: netxus
1 Replies

2. AIX

Installing SSL certificate on AIX

Hello, I am new in UNIX, and some one asks me to install SSL certificates to allow exchange with an external system. Can someone tell how to install certificate (ex : verisignxxx.cer) on a UNIX server? Many thanks. Tibo (4 Replies)
Discussion started by: tibo51
4 Replies

3. Cybersecurity

SSL certificate

Hi guys. I have some questions about ssl certificates. I looked at SSL providers and saw that they are providing 2 types of certificates: per server or per domain. my server host name is: srv1.example.com I have a smtp, imap, web server on this box. but all services accessed by different... (1 Reply)
Discussion started by: majid.merkava
1 Replies

4. Web Development

export SSL certificate

we are doing TCP for our systems. I have a working SSL certificate on prodction webserver. Im planning to export it to our DR server for TCP purposes. However when I export based on the procedure below, it doesn't work. When I restart the DR webserver, it still says the certifcate is expired.Any... (1 Reply)
Discussion started by: lhareigh890
1 Replies

5. Red Hat

SSL Certificate Renewal on Tomcat

Hi, I want to renew the ssl certificate for one of my application on tomcat without down time. I want to know what would the possible impacts for the users who currently have sessions to the app. Regards, Arumon (1 Reply)
Discussion started by: arumon
1 Replies

6. Web Development

WebLogic SSL enabling ignoring CA certificate

Hi, I was trying to enable SSL cert on WebLogic 10.3 (CentOS), I don't have a third party Certificate Authority(C.A) to get the .csr file certified. Is there an alternate way that replaces the step sending .csr file to CA ? Thanks SZS (1 Reply)
Discussion started by: szs
1 Replies

7. Red Hat

SSL certificate generation error 8016

Hi guys, I'm trying to generate a key using the genkey command in centos 6.4 and RHEL6.4, Every thing seems to go cool but I get this error message bad certificate request error -8016 and no key/cert is generated. I don't want use the many openssl(s) commands instead since genkey is a shourtcut... (4 Replies)
Discussion started by: leo_ultra_leo
4 Replies

8. Cybersecurity

SSL Certificate Stores

Hey everyone, I'm trying to get a lay of the land for OS and Application Certificate Stores. Can someone confirm that I have this concept right? If the application you're using say Firefox has it's own trusted CA store, it uses that exclusively. So if you're running firefox in Windows, Firefox... (4 Replies)
Discussion started by: Lost in Cyberia
4 Replies

9. Web Development

CronJobs issues after SSL certificate

Hello! I had a cron job running on my website, activating a php script every friday. The Php script just activated another photo to add in the gallery. It worked fine until I got an SSL certificate for my website, then everything broke. This was the command before: lynx -source... (0 Replies)
Discussion started by: AGDesign
0 Replies

LEARN ABOUT DEBIAN

eurephiadm-certs

eurephiadm certs(7)													       eurephiadm certs(7)

NAME

       eurephiadm-certs - Certificate management for eurephia

DESCRIPTION

       Available modes for the certificate command are:

       -A | --add
	      Register a new certificate

       -D | --delete
	      Delete a registered certificate

       -l | --list
	      List all registered certificates

       -h | --help <mode>
	      Help about a specific mode

LIST MODE

       The list mode will list all registered certificates.  It accepts one parameter:

       -S | --sort <sort key>
	      Decide the sort order of the certificate list

       Available sort keys are:

	      certid
	       Numeric certificate ID

	      depth
	       Certificate depth

	      digest
	       Certificate SHA1 digest

	      cname
	       Certificate Common Name field

	      org
	       Certificate organisation field

	      email
	       Certificate e-mail address field

	      registered
	       When the certificate was registered in eurephia.

ADD MODE

       The add mode will register a new certificate.

       -d | --depth
	      Certificate depth, required.

       -D | --digest
	      SHA1 fingerprint/digest of the new certificate

       -C | --common-name
	      Common name (CN) field of the certificate

       -O | --organisation
	      Organisation (O) field of the certificate

       -E | --email
	      e-mail address (emailAddress) of the certificate

       Usually	the  certificate depth value needs to be 0, if you are registering user account certificates. CA certificates usually have a value
       bigger than 0.

       If you have the certificate file available, you can use the following options to retrieve the needed information directly from  a  certifi-
       cate file.

       -f | --certfile
	      File name of the certificate file.

       -p | --pkcs12
	      If the file is in PKCS#12 format.

       The default format is PEM format, unless --pkcs12 is given.  These two options cannot be used together with -D, -C, -O or -E.  But the cer-
       tificate depth must be given to indicate the certificate depth.

DELETE MODE

       The delete mode will remove a certificate from the certificate database.

       -i | --certid
	      Indicates a unique certificate ID

       -d | --digest
	      A unique SHA1 fingerprint/digest value

       -C | --common-name
	      Common Name (CN) field of a certificate

       -O | --organisation
	      Organisation (O) field of a certificate

       -E | --email
	      e-mail address (emailAddress) of a certificate

       You can use any of these parameters to indicate a search criteria for the certificate (or certificates) you want to delete.   You  will	be
       provided  with  a  list over certificates which matches your search criteria and you will need to approve the deletion of the matching cer-
       tificate(s).

SEE ALSO

       eurephiadm-users(7), eurephiadm-usercerts(7)

AUTHOR

       Copyright (C) 2008-2010	David Sommerseth <dazo@users.sourceforge.net>

David Sommerseth						     July 2010						       eurephiadm certs(7)
All times are GMT -4. The time now is 03:14 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy