Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a thin server that i run with a certificate from GoDaddy and a private key i created before. I also have a file "gd_bundle.crt" that's probably required for access from osx (or iphones).

thin only accepts my certificate and private key but i don't know how to give it "gd_bundle.crt".

What should it do?

share|improve this question
1  
Eugh. GoDaddy. Haven't you heard about SOPA and why GoDaddy should be avoided? –  Tom O'Connor Dec 27 '11 at 23:07

1 Answer 1

up vote 2 down vote accepted

If there's no option to feed thin a certificate path, then you'll want to create a single-file bundle which includes your certificate and the full path up to the root.

However, I wouldn't advise doing it with the bundle downloaded from GoDaddy - that bundle has an invalid certificate signing path - GoDaddy messed it up (see my answer discussing this here).

As in the answer that I linked above with this certificate bundle (that they still haven't fixed!), you'll want to basically build your own certificate bundle. Load up the web site in a browser that figures out the trust path up to the root, and you'll want to export each individual certificate as x509; your own cert (which you already have), any intermediates in order, all the way up to the root.

Then, construct a text file with the pieces from those exports appended together, in reverse order, like this:

-----BEGIN CERTIFICATE-----
(Your certificate's base64 data here)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(intermediate certificate's base64 data here)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(root certificate's base64 data here)
-----END CERTIFICATE-----

And one word of warning - do this in a plain text editor; editors like wordpad will replace -- with , which will cause OpenSSL to fail to load the certificate.

share|improve this answer
    
works like a charm! thanks! –  Rafa Dec 29 '11 at 9:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.