Than I restarted apache (and the server too). Than go to the my website and it still shows security alert, and old (homegenerated by previous guy) certificate info. Like nothing changed.
The funny thing is, I did a search for *.crt files on my server and found this directory, with the date exactly matching the start date that certificate window in IE shows (March 21). It sure looks like that's what outside world see instead of the right certificate:
Code:
[root@online ssl]# ls -la /usr/local/Zend/apache2/conf/ssl.key/
total 100
drwxr-xr-x 4 root root 4096 Mar 21 2007 .
drwxr-xr-x 3 root root 4096 Jan 8 17:21 ..
-rw-r--r-- 1 root root 4720 Mar 21 2007 ca.crt
-rw-r--r-- 1 root root 2151 Mar 21 2007 class3.crt
drwxr-xr-x 2 root root 4096 Mar 21 2007 new
-rw-r--r-- 1 root root 1172 Mar 21 2007 rootca.crt
-rw-r--r-- 1 root root 2569 Mar 21 2007 root.crt
drwxr-xr-x 2 root root 4096 Mar 21 2007 save
-rw-r--r-- 1 root root 1732 Mar 21 2007 server.crt
-rw-r--r-- 1 root root 1058 Mar 21 2007 server.csr
-r--r--r-- 1 root root 1675 Mar 21 2007 server.key
-rw-r--r-- 1 root root 1743 Mar 21 2007 server.key.original
Possibly you have a <virtualhost> entry in which SSL options are overriding the global ones. Also, your certs are world-writable. Make the permissions match the one inside the ssl.key directory (including the directory itself!) that locate found.
Do a grep through all your apache conf files for the name of the old crt file, to see where it references that file. You may have to do it recursively, if the previous guy created a subdirectory and included a conf file from there.
The alternative lazy way: you can rename your three files and replace the previous guy's files with yours, and then take your modifications out of the conf file.
Hello!
I had a cron job running on my website, activating a php script every friday. The Php script just activated another photo to add in the gallery. It worked fine until I got an SSL certificate for my website, then everything broke.
This was the command before:
lynx -source... (0 Replies)
Hey everyone, I'm trying to get a lay of the land for OS and Application Certificate Stores. Can someone confirm that I have this concept right?
If the application you're using say Firefox has it's own trusted CA store, it uses that exclusively. So if you're running firefox in Windows, Firefox... (4 Replies)
Hi guys,
I'm trying to generate a key using the genkey command in centos 6.4 and RHEL6.4, Every thing seems to go cool but I get this error message bad certificate request error -8016 and no key/cert is generated. I don't want use the many openssl(s) commands instead since genkey is a shourtcut... (4 Replies)
Hi,
I was trying to enable SSL cert on WebLogic 10.3 (CentOS),
I don't have a third party Certificate Authority(C.A) to get the .csr file certified.
Is there an alternate way that replaces the step sending .csr file to CA ?
Thanks
SZS (1 Reply)
Hi,
I want to renew the ssl certificate for one of my application on tomcat without down time. I want to know what would the possible impacts for the users who currently have sessions to the app.
Regards,
Arumon (1 Reply)
we are doing TCP for our systems. I have a working SSL certificate on prodction webserver. Im planning to export it to our DR server for TCP purposes. However when I export based on the procedure below, it doesn't work. When I restart the DR webserver, it still says the certifcate is expired.Any... (1 Reply)
Hi guys.
I have some questions about ssl certificates.
I looked at SSL providers and saw that they are providing 2 types of certificates: per server or per domain.
my server host name is: srv1.example.com
I have a smtp, imap, web server on this box. but all services accessed by different... (1 Reply)
Hello,
I am new in UNIX, and some one asks me to install SSL certificates to allow exchange with an external system.
Can someone tell how to install certificate (ex : verisignxxx.cer) on a UNIX server?
Many thanks.
Tibo (4 Replies)
Dear All
Anyone know how to issue two different certification on apache virtualhost fyi i have one virtualhost eg 69.192.1.25:443 already signed with verisign how can i configure another virtualhost 69.192.1.25:443 which signing with another certificate which self signing. i search net not... (1 Reply)
