Apache Error Failed To Configure Ca Certificate Chain
Contents |
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about
Apache 2.4 Failed To Configure Ca Certificate Chain!
Stack Overflow the company Business Learn more about hiring developers or posting ads with httpd failed to configure ca certificate chain us Server Fault Questions Tags Users Badges Unanswered Ask Question _ Server Fault is a question and answer site for system and
Ah02562 Failed To Configure Certificate
network administrators. Join them; it only takes a minute: Sign up Here's how it works: Anybody can ask a question Anybody can answer The best answers are voted up and rise to the top Failed ssl checker to Configure CA Certificate chain after Rebuilding/Re-Installing OS up vote 0 down vote favorite I got my free ssl at startssl.com and it works really fine. My site is working with https://. After I configure LAMP and VSFTP and broke something in there, I decided to re-install UBUNTU 12.04 OS to wipe out all the configurations and unnecessary thing i made in there. Following the same procedure as I was configuring it before and added the same SSLCertificateFile /etc/apache2/ssl/ssl.crt SSLCertificateKeyFile /etc/apache2/ssl/private.key SSLCertificateChainFile /etc/apache2/ssl/sub.class1.server.ca.pem When I restart the apache2 it showed FAILED instead of OK. I immediately run this command cat /var/log/apache2/error.log and found out the error Failed to configure CA certificate chain!. I followed this post Failed to configure CA certificate chain but still no luck. BTW, I configured my VPS like this tutorial https://www.digitalocean.com/community/articles/how-to-set-up-apache-with-a-free-signed-ssl-certificate-on-a-vps and it works so fine before i re-install my OS. apache-2.2 ssl ssl-certificate ubuntu-12.04 share|improve this question asked Apr 20 '14 at 6:53 user3541736 12 Have you already manually verified the chain of trust of your ssl.crt using openssl verify? You might be missing an intermediate certificate. –dawud Apr 20 '14 at 7:25 no, how can i do it? @dawud –user3541736 Apr 20 '14 at 7:36 It is quite simple, read the verify(1) manpage. –dawud Apr 20 '14 at 7:39 okay sir. i will try it. –user3541736 Apr 20 '14 at 7:42 add a comment| active oldest votes Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook. Your Answer draft saved draft discarded Sign up or log in Sign up using Google Sign up using Facebook Sign up using Email and Pa
here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about Stack Overflow the company Business Learn more about hiring developers or posting ads with us Stack Overflow Questions Jobs Documentation Tags Users Badges Ask Question x Dismiss Join the Stack Overflow Community Stack Overflow is a community of 4.7 million programmers, just like you, helping each other. Join them; it http://serverfault.com/questions/590176/failed-to-configure-ca-certificate-chain-after-rebuilding-re-installing-os only takes a minute: Sign up Apache: Failed to configure CA certificate chain up vote 0 down vote favorite Pre-note: The certificates was purchased from a vendor and are valid till 2018 Our Apache for one of our servers (Ubuntu 12.04) crashed this morning. Trying to restart Apache kept giving us the following error message [Wed Jun 03 12:21:51.875811 2015] [ssl:emerg] http://stackoverflow.com/questions/30620004/apache-failed-to-configure-ca-certificate-chain [pid 30534] AH01903: Failed to configure CA certificate chain! [Wed Jun 03 12:21:51.875846 2015] [ssl:emerg] [pid 30534] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/error.log for more information After removing the following line from apache config SSLCertificateChainFile /etc/apache2/ssl/wck.bundle Apache reloaded. The server did not restart so I am sure no updates where done by accident. I then proceeded to try and get it up and running on one of the 14.04 Ubuntu servers we own. The same problem occurred with the same certificates. I asked the guy who setup the 14.04 apache and he claims the problem we suddenly experienced today with the 12.04 server has always happened on the 14.04 server. I tried reproducing the error on my local 14.04 by installing a new Apache and copying the certificates and one of the config files for one of the sites to my local machine. On my local machine after the setup everything worked perfectly. I have tried comparing openssl versions, lib version between the two 14.04, but everything looks the same. I even upgraded both my local m
Site SSL certificate. And the thing is it can all be blamed on a poorly formatted Download Symantec Secure Site http://danielsokolowski.blogspot.com/2012/12/verisignsymantec-failed-to-configure-ca.html Primary and Secondary Intermediate CA bundle page. Yes even though it does say the word 'Download' you are actually asked to copy and paste; brilliant considering that if you do so your resulting file is malformed due to additional white space on each line I did not notice the white space until well into my second failed to hour of frustration and pain. Apache just chokes with "Failed to configure CA certificate chain!" or "Unable to configure verify locations for client authentication" errors. For the substantial premium clients pay to use SSL Verisign certificates I must say I really expected better. To resolve the issue either manually remove the white spaces or create the failed to configure chain file by copying and pasting from the 'Get Certificate' page (format X.509) the First Intermediate Certificate: and Second Intermediate Certificate: sections - End Entity Certificate: is your SSLCertificateFile. Hope this helps you out, feel free to follow me on twitter: @danielsokolows or google plus. Posted by Daniel Sokolowski at 1:22 AM Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest 5 comments: furryscorpionleatherFebruary 9, 2013 at 2:52 AMI ran into the exact same problem and your article helped me avoid pulling hairs out! Symantec should fix this ASAP. There are clearly white spaces at the beginning of each line. This is a Symantec BUG.ReplyDeleteUnknownMarch 13, 2014 at 12:40 PMYou saved me too! Thank you and I am glad this was easy to find.ReplyDeleteMujtaba HaiderMarch 17, 2014 at 10:50 PMThank you a lot, your article made me review my intermediate.crt file and i found the problem.I was missing one hyphen sign out of five, at the end of file, and it took my days. Thanks again.ReplyDeleteJohann Vázqu