Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm getting a warning with my SSL certificate - it's saying its self signed and not trusted, also that it belongs to a different domain but I've purchased it from DigiCert.

The weird thing is it shows...

OU = SomeOrganizationalUnit
O = SomeOrganization
L = SomeCity
S = SomeState

...as the parameters when looking at the certificate. I didn't choose any of these, is there something I'm missing?

I'm using apache / openssl

share|improve this question

3 Answers 3

up vote 6 down vote accepted

Hey kron, glad to see you again

Could you please double check a couple of things to make sure you're reading the right cert

  • run openssl x509 -in CERTFILE -text, that'll show you all the information in the certificate that you bought from digicert
  • Check in your config that you're pointing your daemon to the right key and certificate

If you're getting the error that the certificate is self-signed and those organizational specs it really looks like you're pointing to a default cert, or that you sent the wrong csr to Digicert

In one word, looks like a mixup :)

share|improve this answer
    
thanks. I think I'm going to run through all the steps again, I'll let you know how I get on –  kron Jan 31 '11 at 8:54
    
Cool, good luck :) –  lynxman Jan 31 '11 at 9:03
    
"In one word, looks like a mixup :)" - hit the nail on the head. Thanks. –  kron Jan 31 '11 at 15:23

It looks very likely that you haven't replaced the self signed certificate on the server with the one that you purchased.

share|improve this answer

Check /etc/httpd/conf.d/ssl.conf

look at the path assigned to SSLCertificateFile

...sounds like it is pointing to the default cert, as Robert suggests

Bumped this because I just had a 'duh' moment myself while setting up SSL on an Amazon EC2 instance

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.