Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 15th November 2006, 07:17
LumpyOne LumpyOne is offline
Junior Member
 
Join Date: Oct 2006
Posts: 12
Thanks: 1
Thanked 0 Times in 0 Posts
Unhappy SSL certificates not recognized

We installed an SSL certificate for www.robotcow.com. The certificate was issued by GoDaddy. We also installed an intermediate certificate, and edited the Apache ssl.conf file. This thread was very helpful:
http://www.howtoforge.com/forums/showthread.php?t=1566

HOWEVER...

The certificate seems to be recognized just fine by IE 6, but Firefox 2.0 is giving an error message (see screen cap image). Any ideas?
Attached Images
 
Reply With Quote
Sponsored Links
  #2  
Old 15th November 2006, 07:20
LumpyOne LumpyOne is offline
Junior Member
 
Join Date: Oct 2006
Posts: 12
Thanks: 1
Thanked 0 Times in 0 Posts
Default

It should be mentioned that the new RobotCow web site isn't live yet. The new site is at: https://204.10.140.74/

TIA!
Reply With Quote
  #3  
Old 15th November 2006, 10:02
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,490
Thanks: 835
Thanked 5,533 Times in 4,351 Posts
Default

It looks like the certificate authority is not known by firefox. I recommend to ask godaddy if the root cert for their certificate chain is accepted by firefox too.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #4  
Old 15th November 2006, 20:36
LumpyOne LumpyOne is offline
Junior Member
 
Join Date: Oct 2006
Posts: 12
Thanks: 1
Thanked 0 Times in 0 Posts
Default

I called GoDaddy and spoke directly with their SSL department (phone: 480-505-8852 if anyone ever needs it). The problem is the issuing certificate is not installed correctly. The issuing certificate is specific to GoDaddy (so it's the same for all their customers). IE can apparently validate the web site certificate w/o the issuing certificate, but neither Firefox nor Safari do this, so they both return errors.

I now know what the problem is; next I need to figure out how to fix it.
Reply With Quote
  #5  
Old 16th November 2006, 15:28
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,745 Times in 2,578 Posts
Default

You might have to install an intermediate certificate in your Apache. GoDaddy should have instructions about this.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #6  
Old 16th November 2006, 19:10
LumpyOne LumpyOne is offline
Junior Member
 
Join Date: Oct 2006
Posts: 12
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by falko
You might have to install an intermediate certificate in your Apache. GoDaddy should have instructions about this.
That was exactly the issue -- we didn't have the intermediate certificate installed correctly. GoDaddy's instructions are weak -- they don't know anything about ISPConfig and acted like they had never heard of it.

Problem now solved!
Reply With Quote
  #7  
Old 17th November 2006, 16:08
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,745 Times in 2,578 Posts
Default

Quote:
Originally Posted by LumpyOne
GoDaddy's instructions are weak -- they don't know anything about ISPConfig
This is not related to any control panel, it's just a matter of your Apache configuration.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #8  
Old 17th November 2006, 19:41
LumpyOne LumpyOne is offline
Junior Member
 
Join Date: Oct 2006
Posts: 12
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Well, I would say that it is related to ISPConfig, since the SSL certificate itself is installed through ISPConfig. The intermediate certificate is not, which was confusing for a n00b like me.

It would be nice if either the ISPConfig manual mentioned something about intermediate certificates and/or the GoDaddy instructions mentioned ISPConfig at all. Thank goodness for these forums! Otherwise we would still be trying to figure everything out.

All is well now.
Reply With Quote
  #9  
Old 29th November 2006, 05:47
meekish meekish is offline
Junior Member
 
Join Date: Sep 2006
Posts: 29
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by LumpyOne
Well, I would say that it is related to ISPConfig, since the SSL certificate itself is installed through ISPConfig. The intermediate certificate is not, which was confusing for a n00b like me.

It would be nice if either the ISPConfig manual mentioned something about intermediate certificates and/or the GoDaddy instructions mentioned ISPConfig at all. Thank goodness for these forums! Otherwise we would still be trying to figure everything out.

All is well now.
I also need to install an intermediate certificate. Any chance you could point me to the walk-through/howto on installing the intermediate cert in Apache?

Last edited by meekish; 29th November 2006 at 05:49.
Reply With Quote
  #10  
Old 29th November 2006, 11:31
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,490
Thanks: 835
Thanked 5,533 Times in 4,351 Posts
 
Default

Quote:
Originally Posted by meekish
I also need to install an intermediate certificate. Any chance you could point me to the walk-through/howto on installing the intermediate cert in Apache?
These instructions where normally available on the website where you ordered your SSL certificate.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
SSL Certificates with OpenSSL heat Technical 3 25th January 2011 15:25
SSL Certificates... ctroyp Installation/Configuration 18 30th June 2007 22:56
rebuild ssl certificates for domain change whitty Installation/Configuration 1 6th June 2006 13:12
Unbearably slow access speeds CombatGod Installation/Configuration 5 30th May 2006 17:31
Chained / intermediate SSL certificates max Installation/Configuration 5 9th December 2005 06:03


All times are GMT +2. The time now is 07:11.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.