Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hosting company has a wildcard SSL certificate for * and they provide a DNS record that points to my IP. Server is FreeBSD 6.4 with Apache 2.2.

I can see the certificate when loading in a browser, and locally, using openssl s_client.

My question is, where is the certificate specified and/or located on my server?

httpd.conf does not specify SSLCertificateFile or related directives, and it doesn't include any other conf files. Only thing I've found is conf/ssl.crt/ca-bundle.crt which is just a bunch of CA certificates. /etc/ssl only contains openssl.cnf.

share|improve this question
I would recommend looking around on the server a bit to figure out whether talking to the public IP really ends up talking to your server or a frontend proxy (load balancer or so) that actually picks up the certificate. My guess is they don't want you to have access to the private key - it's private, after all, right? – Theuni Jan 22 '13 at 7:07
@Theuni has the right idea. You can use openssl s_client to test for it, but based on the absence from your configuration the load balancer scenario is the most likely case. Unless you work for the hosting company, there's no way the private key is going to be exposed to you, which means you won't find the certificate in your configurations. (as it is useless without a private key) – Andrew B Jan 22 '13 at 8:09
Ok, makes sense. It's a virtual machine, so maybe the hypervisor is handling it. (SSL still works using loopback But if a front-end machine or hypervisor handles it, then wouldn't there be no SSL at all from the server's perspective? – Marco Jan 22 '13 at 22:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.