556 reputation
1519
bio website jasonswett.net
location Grand Rapids, MI
age
visits member for 4 years, 3 months
seen Oct 11 at 13:36

Sep
19
comment Heroku won't recognize my intermediate cert
Got it. Thanks. Probably not worth pursuing.
Sep
19
comment Heroku won't recognize my intermediate cert
Okay, I was using 2.2 to test and I do see that it works on 2.3. I wonder if it's advisable just to make it a "system requirement" to have Android > 2.2.
Sep
12
comment What is wrong with my SSL trust chain?
Thanks. It turned out to be this page that led to the answer, the part that says: "SSLCertificateChainFile /etc/ssl/ssl.crt/yourDomainName.ca-bundle ***"
Sep
12
comment Is there a delay between the time you make an SSL cert config change and the time it takes effect?
I asked a new question here: serverfault.com/questions/628062/… All I was really after with this question was the yes/no answer to whether I should be expecting a delay (which you provided).
Sep
12
comment Is there a delay between the time you make an SSL cert config change and the time it takes effect?
If it helps, my site is snipsalonsoftware.com. I'll check out Qualys SSL Test. Thanks.
Sep
12
comment Is there a delay between the time you make an SSL cert config change and the time it takes effect?
Please forgive my ignorance since this isn't my area of expertise. I don't think I changed the certificate itself or the configuration of the application that uses the certificate. I've changed the configuration of the server that hosts the application. Before, I was just including "my" certificate, not the root cert or intermediate cert. My change was to put a concatenation of my cert, the intermediate cert, and the root cert in place the file that originally contained just my cert.
Sep
11
comment Is there a delay between the time you make an SSL cert config change and the time it takes effect?
@MichaelHampton Fair question. I edited my question to be more specific.
Mar
16
comment What does it mean that no cert given is a “domain name certificate”?
@Halfgaar Got it, thanks. I have the certificate I bought, I have the intermediate certificate, and I'm now working on getting my hands on the correct root certificate.
Mar
16
comment What is the “server.crt” in this example?
Okay, thanks. DreamHost resells Comodo certificates. So I need to somehow get my hands on the root certificate?
Mar
16
comment What is the “server.crt” in this example?
And if so, what does that make cacert.pem?
Mar
16
comment What is the “server.crt” in this example?
Okay, I think I understand. In my DreamHost panel they show me three values: Certificate, Private Key and Intermediate Certificate. DreamHost also emailed me my certificate with a value that exactly matches the value under Certificate in the panel UI. So this value would be the trusted server certificate, the server.crt?
Mar
16
comment What is the “server.crt” in this example?
@TessellatingHeckler Okay, I think we've revealed a hole in my understanding. My certificate vendor is DreamHost, and they provide in my "panel" area three things: Certificate, Private Key and Intermediate Certificate. Would any of these things be the "root certificate"? Would any of them be "my" certificate?
Mar
16
comment What is the “server.crt” in this example?
@Ladadadada Yes, that describes my experience. I think my "root" label is probably wrong. In the DreamHost UI the thing I was referring to as the root certificate is simply labeled "Certificate."
Mar
16
comment What does it mean that no cert given is a “domain name certificate”?
@Halfgaar Hmm, I'm not sure what you mean by my own certificate. I purchased a signed SSL certificate from DreamHost and they gave me a root certificate, an intermediate certificate and a private key.
Mar
16
comment What does it mean that no cert given is a “domain name certificate”?
And @Halfgaar, if it helps, domain.pem is the root certificate concatenated with the intermediate certificate. I don't know if that fact has anything to do with what you were asking.
Mar
16
comment How do I tell if a root CA is in place for a particular SSL certificate?
Okay, thanks. I did successfully put SSL on a Heroku site once before and I used the format of root certificate concatenated with intermediate certificate. So I think that answers that question. I'm still unclear on the answer to my original question of how to tell whether the root CA is "in place".
Mar
16
comment What does it mean that no cert given is a “domain name certificate”?
@MichaelHampton I take that to mean you think my cert is fine?
Mar
16
comment How do I tell if a root CA is in place for a particular SSL certificate?
Hmm. What I've done so far is to purchase a professionally signed SSL certificate from DreamHost, and I can't yet install the certificate on my server (Heroku) due to the problems I'm having. So do these things you're mentioning still apply?
Mar
16
comment What does it mean that no cert given is a “domain name certificate”?
@Halfgaar I updated my question to include the output from that command. I don't know how to tell if it's a proper certificate, or if the root CA and intermediate CA are in place.
Jun
7
comment Making a simple MySQL backup script to be run via cron, having permissions issues
Done.............................