Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have replaced the old ssl certficate with new one and restart apache several time but the old certificate still show on web browser and when I run a command

openssl s_client -connect -showcerts

also I have delete all old certficate files. so not sure where apache still read these certficate. and not read the new one. here is my ssl.conf


SSLEngine on
SSLOptions +StrictRequire

<Directory />

SSLProtocol -all +TLSv1 +SSLv3

 SSLMutex file:/usr/apache2/logs/ssl_mutex

SSLRandomSeed startup file:/dev/urandom 1024
SSLRandomSeed connect file:/dev/urandom 1024

SSLSessionCache shm:/usr/apache2/logs/ssl_cache_shm
SSLSessionCacheTimeout 600

SSLPassPhraseDialog builtin
SSLCertificateFile /usr/apache2/conf/ssl.crt/server.crt
SSLCertificateKeyFile /usr/apache2/conf/ssl.key/server.key

SSLVerifyClient none
SSLProxyEngine off

<IfModule mime.c>
AddType application/x-x509-ca-cert      .crt
AddType application/x-pkcs7-crl         .crl
share|improve this question
Post your apache config files... – Jeff Ferland Apr 4 '12 at 21:36
Did you restart, and not just do a reload or graceful restart? – Shane Madden Apr 4 '12 at 22:26
@shane, yes I did stop and restart not reload. – user1212143 Apr 5 '12 at 1:01
@Jeff, I have added my apache ssl.conf – user1212143 Apr 5 '12 at 1:40
How about the port 443 virtual host? – Shane Madden Apr 5 '12 at 3:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.