Index: [Article Count Order] [Thread]

Date:  Mon, 20 Jul 2009 07:20:54 -0700
From:  "Ken Marcus - Precision Web Hosting, Inc." <kenlists (at mark) precisionweb.net>
Subject:  [coba-e:15831] Re: Godaddy SSL problems
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <09F7F03B3B0C499D9A94BA82810D17DB@OfficeKen>
References:  <C1400FCA-E3A2-49D6-A559-4E8A5CAB674B (at mark) sikesland.com>
X-Mail-Count: 15831


----- Original Message ----- 
From: John Sikes
To: coba-e (at mark) bluequartz.org
Sent: Saturday, July 18, 2009 8:57 PM
Subject: [coba-e:15824] Godaddy SSL problems


I have checked in the archives and have seen a lot of issues with GoDaddy 
SSl's.  I have an vsite that has purchased one and I need to get it 
installed and working properly.   I followed the normal ssl install 
instructions from the manual and it 'kinda' works.  The problems appears to 
be with the intermediate cert.  The instructions state to add 3 lines to the 
httpd.conf file,


Open the Apache httpd.conf file and add the following directives:
SSLCertificateFile /path to certificate file/your issued certificate
SSLCertificateKeyFile /path to key file/your key file
SSLCertificateChainFile /path to intermediate certificate/null
but there instructions are for a service wide install.  I would think that 
they should be put into the correct vhost.include file for the vsite.  This 
however results in an unhappy response from apache.


Starting httpd: Syntax error on line 5 of /etc/httpd/conf.d/ssl_perl.conf:
$s->add_config() has failed: SSLCertificateChainFile: file 
'/home/sites/domain.com/gd_bundle.crt/null' does not exist or is empty at 
/usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi/Apache/PerlSections.pm 
line 203.\n


Worse yet is web server crashes a few minutes and can not be restarted.


I commented out the changes, restarted apache and everything was as it 
was... 'kinda' working (IE is OK, Firefox does not recognize the CA).


I know that is is not a root cert, but there is not much I can do about 
that, I just need to find how to make it work at this point.


Any suggestions?


Thanks.
John Sikes
<<



John

Why don't you just install the intermediate certs from the GUI  and let it 
add the  lines to the correct conf file automatically for you.


----
Ken Marcus
Ecommerce Web Hosting by
Precision Web Hosting, Inc.
http://www.precisionweb.net