On Mon, Nov 14, 2022 at 8:20 PM Lukas Tribus <lukas@ltri.eu> wrote:

> On Mon, 14 Nov 2022 at 21:09, Lukas Tribus <lukas@ltri.eu> wrote:
> >
> > On Mon, 14 Nov 2022 at 21:00, James Read <jamesread5737@gmail.com>
> wrote:
> > >
> > >
> > >
> > > On Mon, Nov 14, 2022 at 5:58 PM Lukas Tribus <lukas@ltri.eu> wrote:
> > >>
> > >> On Mon, 14 Nov 2022 at 17:31, James Read <jamesread5737@gmail.com>
> wrote:
> > >> >
> > >> > I have configured SSL on a number of subdomains including
> https://us.wottot.com
> > >> >
> > >> > On my PC I can view the resulting web page without any problems so
> this leads me to believe the SSL configuration is correct.
> > >>
> > >> Wrong, the intermediate certificate "Starfield Secure Certificate
> > >> Authority - G2" is missing,
> > >
> > >
> > > Thanks for that. Any idea where I can find the intermediate
> certificate?
> >
> > You can find the intermediate certificate download link in the ssllabs
> > ssltest test results
> >
> > Issuer: Starfield Secure Certificate Authority - G2
> > --> AIA: http://certificates.starfieldtech.com/repository/sfig2.crt
>
> For nginx you need the base64 encoding, which is:
>
> https://ssl-ccp.secureserver.net/repository/sfig2.crt.pem
>
>
I tried adding that certificate but sudo nginx -t now returns the following
error:

nginx: [emerg] SSL_CTX_use_PrivateKey("/etc/ssl/private/wottot.com.key")
failed (SSL: error:0B080074:x509 certificate
routines:X509_check_private_key:key values mismatch)
nginx: configuration file /etc/nginx/nginx.conf test failed

James Read


>
> Lukas
> _______________________________________________
> nginx mailing list -- nginx@nginx.org
> To unsubscribe send an email to nginx-leave@nginx.org
>
_______________________________________________
nginx mailing list -- nginx@nginx.org
To unsubscribe send an email to nginx-leave@nginx.org