I've installed a new SSL certificate using SHA2 hashing instead of SHA1. My chain checks out using these online verifiers:
However this one tells me it can't find the Root CA:
How do I fix this?
Edit: Derp, here's the URL: secure.symt.us
This is on Apache2 on CentOS.
I have followed GoDaddy's setup instructions to the letter and restarted the server.
Edit 2, apache vhost conf:
SSLEngine on SSLCertificateFile /etc/pki/tls/certs/ca.crt SSLCertificateKeyFile /etc/pki/tls/private/ca.key SSLCertificateChainFile /etc/pki/tls/certs/gd_bundle-g2.crt
==== [SOLVED] ====
The problem turned out to be that my vhost was defined as
<VirtualHost *:443>. Changing it to the server's IP address
<VirtualHost xx.xx.xx.xx:443> fixed it.
There was a catch-all default
<VirtualHost _default_:443> albeit without an SSLCertificateChainFile directive. Grepping /etc/httpd for SSLCertificateChainFile returned only my directive.
Perhaps apache has its own default SSLCertificateChainFile internally and refused to send mine when configured as *:443?