0

im having issues using a webhook and think it might be my SSL cert. When I use sslabs.com to test my server i get a warning about "Incorrect Order, Extra Certs"

these are the files in my letsencrypt/live folder:

cert.pem chain.pem fullchain.pem privkey.pem

Any idea whats causing this issue and how i can resolve?

I found this here:

https://community.letsencrypt.org/t/incorrect-order-and-extra-certificate-error/8759

but not sure if this applies to me.

  • What are the relevant configuration lines in your Apache configuration? – Hagen von Eitzen Sep 23 '18 at 17:25
0

You should be able to use either

    SSLCertificateFile    /etc/letsencrypt/live/XXXXX/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/XXXXX/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/XXXXX/chain.pem

or (with your modern-enough Apache >= 2.4.8)

    SSLCertificateFile    /etc/letsencrypt/live/XXXXX/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/XXXXX/privkey.pem

in your configuration, but not

    SSLCertificateFile    /etc/letsencrypt/live/XXXXX/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/XXXXX/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/XXXXX/fullchain.pem

Note that fullchain is the concatenation of cert and chain, so the bad variant has the leaf cert twice.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.