Date:  Sat, 18 Jul 2009 22:57:28 -0500
From:  John Sikes <jsikes (at mark) sikesland.com>
Subject:  [coba-e:15824] Godaddy SSL problems
To:  coba-e (at mark) bluequartz.org
Message-Id:  <C1400FCA-E3A2-49D6-A559-4E8A5CAB674B (at mark) sikesland.com>
X-Mail-Count: 15824

I have checked in the archives and have seen a lot of issues with  
GoDaddy SSl's.  I have an vsite that has purchased one and I need to  
get it installed and working properly.   I followed the normal ssl  
install instructions from the manual and it 'kinda' works.  The  
problems appears to be with the intermediate cert.  The instructions  
state to add 3 lines to the httpd.conf file,

Open the Apache httpd.conf file and add the following directives:
SSLCertificateFile /path to certificate file/your issued certificate
SSLCertificateKeyFile /path to key file/your key file
SSLCertificateChainFile /path to intermediate certificate/null
but there instructions are for a service wide install.  I would think  
that they should be put into the correct vhost.include file for the  
vsite.  This however results in an unhappy response from apache.

Starting httpd: Syntax error on line 5 of /etc/httpd/conf.d/ 
ssl_perl.conf:
$s->add_config() has failed: SSLCertificateChainFile: file '/home/ 
sites/domain.com/gd_bundle.crt/null' does not exist or is empty at / 
usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi/Apache/ 
PerlSections.pm line 203.\n

Worse yet is web server crashes a few minutes and can not be restarted.

I commented out the changes, restarted apache and everything was as it  
was... 'kinda' working (IE is OK, Firefox does not recognize the CA).

I know that is is not a root cert, but there is not much I can do  
about that, I just need to find how to make it work at this point.

Any suggestions?

Thanks.
John Sikes

  
	
15824_2.html (attatchment)(tag is disabled)