I'm getting a warning with my SSL certificate - it's saying its self signed and not trusted, also that it belongs to a different domain but I've purchased it from DigiCert.

The weird thing is it shows...

OU = SomeOrganizationalUnit
O = SomeOrganization
L = SomeCity
S = SomeState

...as the parameters when looking at the certificate. I didn't choose any of these, is there something I'm missing?

I'm using apache / openssl

link|improve this question

feedback

2 Answers

up vote 4 down vote accepted

Hey kron, glad to see you again

Could you please double check a couple of things to make sure you're reading the right cert

  • run openssl x509 -in CERTFILE -text, that'll show you all the information in the certificate that you bought from digicert
  • Check in your config that you're pointing your daemon to the right key and certificate

If you're getting the error that the certificate is self-signed and those organizational specs it really looks like you're pointing to a default cert, or that you sent the wrong csr to Digicert

In one word, looks like a mixup :)

link|improve this answer
thanks. I think I'm going to run through all the steps again, I'll let you know how I get on – kron Jan 31 '11 at 8:54
Cool, good luck :) – lynxman Jan 31 '11 at 9:03
"In one word, looks like a mixup :)" - hit the nail on the head. Thanks. – kron Jan 31 '11 at 15:23
feedback

It looks very likely that you haven't replaced the self signed certificate on the server with the one that you purchased.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.