All files from this thread

File Name	File Size		Posted by	Date
smime.p7s	4 KB	open | download	Daniel Lundqvist	09/01/2013	Read message
smime.p7s	4 KB	open | download	Daniel Lundqvist	09/01/2013	Read message
smime.p7s	4 KB	open | download	Daniel Lundqvist	09/02/2013	Read message
smime.p7s	4 KB	open | download	Daniel Lundqvist	09/02/2013	Read message

On 2013-09-02 11:59, Daniel Lundqvist wrote:
> I have, it just says only 1 certificate is provided. Here are the test
> results:
> https://www.ssllabs.com/ssltest/analyze.html?d=www.malarhojden.nu
....

I note that you're using startcom for the certificate, I recall that the
intermediate certificate they say to use isn't actually the one provided
and had to complete the certificate chain myself.

https://www.ssllabs.com/ssltest/analyze.html?d=www.stevewilson.co.uk

To build up my pem I started with the crt and key, then running "openssl
x509 -in cert.pem -noout -text" I was then able to download the correct
intermediate using the "CA Issuers - URI" provided in the certificate.
Appending this to the pem and retesting. Repeating the process for each
certificate until it became valid.

Authority Information Access:
OCSP - URI:http://ocsp.startssl.com/sub/class1/server/ca
CA Issuers -
URI:http://aia.startssl.com/certs/sub.class1.server.ca.crt

It might be worth checking if your intermediate matches the above
sub.class1.server.ca.crt one.

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx