I am managing a website which uses a SSL/TLS Certificate from a well known issuer (GoDaddy in this case, although this same error appears with certificates from other issuers). The website is hosted on an Apache webserver.
Some webbrowsers complain about the SSL/TLS certificate with an error like:
The site's security certificate is not trusted!
You attempted to reach www.example.org, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system.
Other webbrowsers do not complain. This suggests to me that the Certificate itself is installed correctly on the webserver, but a piece of the certificate chain is missing from either the webbrowser or the server.
Here is another example from
$ wget https://www.example.org/ --2013-01-23 12:34:47-- https://www.example.org/ Resolving www.example.org (www.example.org)... 192.168.100.100, 2001:400:xxx::10 Connecting to www.example.org (www.example.org)|192.168.100.100|:443... connected. ERROR: The certificate of ‘www.example.org’ is not trusted. ERROR: The certificate of ‘www.example.org’ hasn't got a known issuer.
Is it possible to correct this from the web server configuration?
The certificate from GoDaddy is legitimate, and is installed on the webserver. I do not want to bypass this error (e.g. I do not want to use
wget --no-check-certificate). I want to prevent this error by adding the correct configuration on the server side.