Hello,

i had some problems with Comodo SSL Certs, too. I don't know your error
message, but the Howto which you linked here is old. It looks like
Comodo had to replace their certificate chain and did not update the
howto.

I used portecle (you can get it from sf.net) to examine the
certificates.


rgds, Axel


On 2014-04-18 16:29, Silvio Siefke wrote:
> Hello,
>
> On Thu, 17 Apr 2014 15:11:19 -0400 "mex" <nginx-forum@nginx.us> wrote:
>
>> if your site is silviosiefke.com, there is no tls-service available
>> on port 443
>
> I has checked with nmap, this say me is open.
>
>> can you please paste the output of nginx -t / nginx -V ?
>
> ks3374456 siefke # nginx -t
> nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
> nginx: configuration file /etc/nginx/nginx.conf test is successful
>
> ks3374456 siefke # nginx -V
> nginx version: nginx/1.4.7
> TLS SNI support enabled
> configure arguments: --prefix=/usr --conf-path=/etc/nginx/nginx.conf
> --error-log-path=/var/log/nginx/error_log --pid-path=/run/nginx.pid
> --lock-path=/run/lock/nginx.lock --with-cc-opt=-I/usr/include
> --with-ld-opt=-L/usr/lib --http-log-path=/var/log/nginx/access_log
> --http-client-body-temp-path=//var/lib/nginx/tmp/client
> --http-proxy-temp-path=//var/lib/nginx/tmp/proxy
> --http-fastcgi-temp-path=//var/lib/nginx/tmp/fastcgi
> --http-scgi-temp-path=//var/lib/nginx/tmp/scgi
> --http-uwsgi-temp-path=//var/lib/nginx/tmp/uwsgi --with-ipv6
> --with-pcre
> --add-module=/var/tmp/portage/www-servers/nginx-1.4.7/work/nginx_syslog_patch-165affd9741f0e30c4c8225da5e487d33832aca3
> --without-http_limit_conn_module --with-http_addition_module
> --with-http_dav_module --with-http_flv_module --with-http_geoip_module
> --with-http_gunzip_module --with-http_gzip_static_module
> --with-http_mp4_module --with-http_perl_module
> --with-http_random_index_module --with-http_realip_module
> --with-http_spdy_module --with-ht
> tp_stub_
> status_module --with-http_sub_module --with-http_xslt_module
> --with-http_realip_module
> --add-module=/var/tmp/portage/www-servers/nginx-1.4.7/work/headers-more-nginx-module-0.25
> --add-module=/var/tmp/portage/www-servers/nginx-1.4.7/work/nginx_http_push_module-0.712
> --add-module=/var/tmp/portage/www-servers/nginx-1.4.7/work/ngx_slowfs_cache-1.10
> --add-module=/var/tmp/portage/www-servers/nginx-1.4.7/work/ngx-fancyindex-0.3.3
> --add-module=/var/tmp/portage/www-servers/nginx-1.4.7/work/ngx_http_auth_pam_module-1.3
> --add-module=/var/tmp/portage/www-servers/nginx-1.4.7/work/nginx-dav-ext-module-0.0.3
> --add-module=/var/tmp/portage/www-servers/nginx-1.4.7/work/nginx-push-stream-module-0.4.0
> --with-http_ssl_module --without-mail_imap_module
> --without-mail_pop3_module --without-mail_smtp_module --user=nginx
> --group=nginx
>
>
>
>> ########################################################
>> testssl.sh v2.0rc2 (https://testssl.sh)
>> ########################################################
>>
>> Using "OpenSSL 1.0.1g 7 Apr 2014" on
>>
>>
>> On port 443 @ silviosiefke.com seems a server but not TLS/SSL enabled.
>> Ignore? ^C
>
>
> mmh that not understand. With cacert.org the server run without probs,
> but
> the problem is that cacert not accept most of browser. Why not accept
> commodo
> ssl?
>
>
> Thank you for help & Nice Day
> Silvio
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx