Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I installed a GoDaddy SSL onto a virtual server using Plesk. GoDaddy mentioned that I would have to install an "intermediate" certificate in addition to the normal one.

I thought that the "intermediate" certificate is all that I would need to make browsers recognize the SSL, but when I type in my site with https:// in front of it, Chrome, Firefox, and IE all give a warning about how the SSL is not trusted.

GoDaddy said that the intermediate was called gd_bundle.crt and that it needed to be placed in the CA certificate field. I did this, and I also installed what I believe to be the normal SSL in the certificate field.

Anyway, I'm still getting the warning on all 3 browsers. Any idea what I can do to avoid getting the warnings?

Thanks in advance,

John

share|improve this question

migrated from webmasters.stackexchange.com Jan 19 '11 at 12:55

This question came from our site for pro webmasters.

add comment

3 Answers 3

You shouldn't put an intermediate certificate in the CA Certificate field, that'll break your certificate trust chain.

The intermediate certificate should be appended in the .crt file for your cert BEFORE your actual certificate in order to respect the chain, so both should be in one file and show in order.

share|improve this answer
    
before or after depends on the actual server. on nginx the bundle must come after the site cert: nginx.org/en/docs/http/configuring_https_servers.html#chains –  Attila Lendvai Apr 13 at 8:38
add comment

Check the site at http://www.sslshopper.com/ssl-checker.html to make sure it is giving out the Intermediate certificates. If it is not, try following the guide for installing SSL certs in Plesk: http://download1.swsoft.com/Plesk/Plesk8.1/Doc/plesk-8.1-unix-administrators-guide/

share|improve this answer
add comment

You don't mention what web server you are using.

With Apache you use the SSLCertificateChainFile directive e.g.

SSLCertificateChainFile /etc/httpd/certs/gd_bundle.crt
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.