Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i finally got my certificate verified from a trusted CA. now, i have edited my etc/httpd/conf.d/ssl.conf to locate my new certificate.

i already included the ssl.conf in my etc/httpd/conf/httpd.conf.

i have setup my virtual host.

NameVirtualHost *:443
<VirtualHost *:443>
    DocumentRoot /home/host/public
    DirectoryIndex index.html index.php

    <Directory "/home/host/public">
        AllowOverride FileInfo Limit Options Indexes
        Allow from all
        Options Indexes FollowSymLinks MultiViews
    <Files ~ "^\.ht">
             Order allow,deny
             Deny from all

and here's my ssl.conf file:

LoadModule ssl_module modules/
Listen 443
<VirtualHost _default_:443>
    SSLEngine on
    SSLCertificateFile /etc/pki/tls/certs/
    SSLCertificateKeyFile /etc/pki/tls/private/
    SSLCertificateChainFile /etc/pki/tls/certs/gd_bundle.crt

when i access my site in a web browser via my ip address (, i still Untrusted Connected error. Error code: ssl_error_bad_cert_domain

Have I misconfigured my server setup? What are the other things I have to add/setup in my ssl and apache config? Please help. Thanks in advance.

share|improve this question
ssl certificate is for domain name not for IP, thats why you are getting that error, your configuration looks fine. – Toqeer Sep 13 '12 at 3:59
oh. thank you for the info @Toqeer. but when i confirm the security exception on my browser, the address bar should have a lock icon but i have seen none. – xian Sep 13 '12 at 4:13
Look for the log file for any error, what distro you are using? if its centos then default httpd log file in /var/log/httpd/error.log or may be /var/log/httpd/ssl_error_log. – Toqeer Sep 13 '12 at 4:28

You need to access the https part of the site via the domain name for which you have the signed certificate, otherwise you'll always get such an error.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.