creating_valid_startssl_certificates

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
Next revisionBoth sides next revision
creating_valid_startssl_certificates [07.03.2015 08:35] – Pascal Sutercreating_valid_startssl_certificates [26.07.2015 09:04] – Pascal Suter
Line 31: Line 31:
         SSLProtocol all -SSLv2         SSLProtocol all -SSLv2
         SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM         SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
-        SSLCertificateFile    /etc/ssl/certs/files/server.crt +        SSLCertificateFile    /etc/ssl/certs/server.crt 
-        SSLCertificateKeyFile /etc/ssl/certs/files/server.key+        SSLCertificateKeyFile /etc/ssl/certs/server.key
         SSLCertificateChainFile /etc/ssl/certs/sub.class1.server.ca.pem         SSLCertificateChainFile /etc/ssl/certs/sub.class1.server.ca.pem
 </code> </code>
  
 now **reload apache** now **reload apache**
 +
 +==== sec_error_ocsp_unknown_cert ====
 +shortly after updating (orp probalby also creating) a certificate with startssl firefox might not allow you to access the site, returning an error sec_error_ocsp_unknown_cert. this is because apparently startssl's ocsp server needs to reload its cached entries first in order for the new certificates to be usable through firefox. so just allow it some time to catch up and it should all work. 
  
  
  • creating_valid_startssl_certificates.txt
  • Last modified: 27.10.2016 17:31
  • by Pascal Suter