Reputation
534
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
9 30
Impact
~83k people reached

Jun
27
answered Trying to mitigate Logjam on Apache 2.2.16
Jun
12
awarded  Popular Question
May
21
awarded  Notable Question
Apr
23
awarded  Notable Question
Apr
15
comment Find uptime of 'apache2'
Great. One sureshot result in one line.
Mar
19
revised Is this SSL certificate chain broken and how to fix it?
added 134 characters in body
Mar
19
accepted Is this SSL certificate chain broken and how to fix it?
Mar
18
revised Is this SSL certificate chain broken and how to fix it?
for accessibility reasons, replaced image of domain name with example.com
Mar
18
revised Is this SSL certificate chain broken and how to fix it?
added 61 characters in body
Mar
18
awarded  Self-Learner
Mar
18
comment Is this SSL certificate chain broken and how to fix it?
@HåkanLindqvist the OCSP warning is gone. it was temporary and there are other people on the Qualys forum complaining about the same thing. Thank you.
Mar
17
revised Is this SSL certificate chain broken and how to fix it?
added 45 characters in body
Mar
17
comment Is this SSL certificate chain broken and how to fix it?
@HåkanLindqvist Both run on the same Apache 2.2.x server. SSLUseStapling is not present, and the Qualys' test shows OCSP stapling=No. The only difference is that this latter site's cert was renewed today. Both are SHA-2
Mar
17
comment Is this SSL certificate chain broken and how to fix it?
@HåkanLindqvist to be clear, I applied the same ssl.ca to another domain (text2image.com/user_images/…), and this is where I am getting the error. It's the same cert, same issuer.
Mar
17
comment Is this SSL certificate chain broken and how to fix it?
@HåkanLindqvist using openssl x509 -fingerprint -in ssl.ca i nailed that the part of the file that has fingerprint 02faf3e291435468607857694df5e45b68851868 was the first PEM. I removed it, and now I get i.imgur.com/1iG2UCz.png and i.imgur.com/m8gYbdG.png (OCSP ERROR: Request failed with OCSP status: 6 [ocsp.comodoca.com])
Mar
17
comment Is this SSL certificate chain broken and how to fix it?
@HåkanLindqvist So I should decrypt the certs, find out which one is the root cert and remove it from the chain?
Mar
17
answered Is this SSL certificate chain broken and how to fix it?
Mar
17
comment Is this SSL certificate chain broken and how to fix it?
@SteffenUllrich a one cert bundle fits all would be ideal.
Mar
17
accepted Apache configuration redirect using only redirect, not rewrite
Mar
17
revised Is this SSL certificate chain broken and how to fix it?
deleted 88 characters in body; edited title