[Novalug] problem with new ssl certificate

covici@ccs.covici.com covici@ccs.covici.com
Wed Apr 15 15:48:36 EDT 2015


Thanks for that site, I bought a cert from ssl.com and it work first
time.  I wish I could get my money back from network solutions, but not
likely.


Nick Danger via Novalug <novalug@firemountain.net> wrote:

> Have you tried something like "SSLShopper"?
> https://www.sslshopper.com/ssl-checker.html  I usually use that to
> check my cert chain and solve the issues that way.
> 
> On 04/15/2015 10:10 AM, covici--- via Novalug wrote:
> > Its apache 2.4.12, under linux gentoo kernel 3.6.6. I will reverse and
> > see if it fixes anything.
> > Nope, reversing the certs changed nothing.
> >
> > John Franklin <franklin@elfie.org> wrote:
> >
> >> Since you can reproduce the error with s_client, try reversing them.
> >>
> >> This shouldn't be the issue.  SSL libraries should be clever enough to build s dictionary of certs first, then follow the chain, but I believe John is right that it does sometimes matter.
> >>
> >> What specific versions (browser, version, OS) trigger it?
> >>
> >> jf
> >> -- 
> >> John Franklin
> >> franklin@elfie.org
> >>
> >>
> >>
> >> On Apr 15, 2015, at 9:32 AM, covici--- via Novalug <novalug@firemountain.net> wrote:
> >>
> >>> I have the NetworkSolutionsDVServerCA.crt first and then the
> >>> AddTrustExternalCARoot.crt after that, is this the correct order?
> >>>
> >>> John Place via Novalug <novalug@firemountain.net> wrote:
> >>>
> >>>> I am assuming it has two chained certs, make sure the order is
> >>>> correct, that can burn you.
> >>>>
> >>>> Thanks
> >>>> John
> >>>>
> >>>>
> >>>>
> >>>> On 04/15/2015 01:59 AM, covici--- via Novalug wrote:
> >>>>> So how can I fix this, or should I get an ssl cert from somewhere else?
> >>>> **********************************************************************
> >>>> The Novalug mailing list is hosted by firemountain.net.
> >>>>
> >>>> To unsubscribe or change delivery options:
> >>>> http://www.firemountain.net/mailman/listinfo/novalug
> >>> -- 
> >>> Your life is like a penny.  You're going to lose it.  The question is:
> >>> How do
> >>> you spend it?
> >>>
> >>>          John Covici
> >>>          covici@ccs.covici.com
> >>> **********************************************************************
> >>> The Novalug mailing list is hosted by firemountain.net.
> >>>
> >>> To unsubscribe or change delivery options:
> >>> http://www.firemountain.net/mailman/listinfo/novalug
> 
> 
> **********************************************************************
> The Novalug mailing list is hosted by firemountain.net.
> 
> To unsubscribe or change delivery options:
> http://www.firemountain.net/mailman/listinfo/novalug

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

         John Covici
         covici@ccs.covici.com




More information about the Novalug mailing list