I am really hoping someone with more experience can help me get our production site back online as i am pulling my hair out!
I have just renewed an expired ssl cert on our production website, I created a new certificate and key then ordered a new ssl on Comodo. Since I added the new comodo signed certificate and key I can't connect to our production website from any device that has previously used the website with the old certificate. However on an iPad or iPhone everything works as should.
If i try and connect all i see in the bottom left corner is Performing TLS handshake and then i get the page is insecure error, I have checked online tools like: https://www.ssllabs.com/ssltest/ and they say the ssl is fine and valid until February 2018.
Below is my config file for nginx however I am starting to think this is related to the browser caching the old certificate as i have rebooted the server several times to see if that would change anything.
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
server_tokens off;
return 301 https://$host$request_uri;
}
server {
listen 443;
server_name *;
server_tokens off;
ssl on;
ssl_certificate /jet/etc/nginx/ssl/cert.crt;
ssl_certificate_key /jet/etc/nginx/ssl/key.key;
error_page 403 https://$host/404;
error_page 404 https://$host/404;
root /jet/app/www/public;
index index.php index.html index.htm;
autoindex on;
# Load configuration files for the default server block.
include /jet/etc/nginx/conf.d/*.inc;
}
I have also attached a screen shot but removed the domain name, I would be really great full for any help. I am unable to sleep until I resolve the issue therefore using the phrase "I am panicking" is an understatement!
On one browser i get the following:
www...... uses an invalid security certificate. The certificate expired on 29 November 2017, 23:59. The current time is 30 November 2017, 03:33.
Which does apply to the old certificate that has been replaced and the new does not expire until February 2018. I have verified this has definitely been removed from the server but Firefox and other browsers except ios seem to think it has not been removed, could this be down to cache somewhere along the lines, If so.. does that mean all my visitors that have been to the site will see this message unless their a unique visitor?
ssl_certificate
entries? – Tero Kilkanen Nov 30 '17 at 7:14