0

Listed below is an example from an Apache virtual host file. I was curious if there was a particular order that the SSLCertificate, SSLCertificateKeyFile, and the SSLCACertificateFile should be in? Should the intermediate certificate file from the CA be listed first? Is there a hierarchy to how these are processed? The CA intermediate file is needed in this case to support the 2048 bit SSL certificate that is being used.

SSLEngine ON
SSLOptions +StrictRequire
SSLCertificateFile /path/to/file.crt
SSLCertificateKeyFile /path/to/file.key
SSLCACertificateFile /path/to/intermediate-ca-file.crt

1 Answer 1

1

No, the ordering of SSLCACertificateFile entries within the .conf file does not matter because the trust chain that is followed is taken from the certificates them self and assembled during the loading of the HTTPDs

1
  • @user7918: Thanks for the information and the update. I was worried that it might create some problem by having it listed last.
    – John
    Nov 19, 2010 at 17:02

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .