Unable to successfully install GoDaddy SSL Certificate to Bitnami>Apache v2.4.23 The 2019 Stack Overflow Developer Survey Results Are InSSL certificate paths in a virtual hostWildcard SSL on Debian 7, Apache2 not working. (Rackspace Cloud Server)Discerning GoDaddy SSL Certificate TypesInstall godaddy ssl certificate on amazon ec2How to Check if a SSL Certificate is successfully renewedUnbuntu server running Apache with an SSL Cert IssueSSL not working with Apache on WindowsSSL: CHAIN PROBLEMS! >> GoDaddy + Apache 2.4.23 on WINDOWS 2012 R2Secure GoDaddy site with Azure SSL CertificateLet's Encrypt wildcard certificates and Apache 2 not working
Return to UK after having been refused entry years ago
FPGA - DIY Programming
One word riddle: Vowel in the middle
Where to refill my bottle in India?
Does a dangling wire really electrocute me if I'm standing in water?
What does Linus Torvalds mean when he says that Git "never ever" tracks a file?
What is the most effective way of iterating a std::vector and why?
Did 3000BC Egyptians use meteoric iron weapons?
Why didn't the Event Horizon Telescope team mention Sagittarius A*?
Is a "Democratic" Oligarchy-Style System Possible?
Delete all lines which don't have n characters before delimiter
Can a flute soloist sit?
How to answer pointed "are you quitting" questioning when I don't want them to suspect
Apparent duplicates between Haynes service instructions and MOT
Can we generate random numbers using irrational numbers like π and e?
Have you ever entered Singapore using a different passport or name?
slides for 30min~1hr skype tenure track application interview
What does ひと匙 mean in this manga and has it been used colloquially?
Is this app Icon Browser Safe/Legit?
What tool would a Roman-age civilization have for the breaking of silver and other metals into dust?
What is the motivation for a law requiring 2 parties to consent for recording a conversation
How to notate time signature switching consistently every measure
Why can Shazam fly?
Are spiders unable to hurt humans, especially very small spiders?
Unable to successfully install GoDaddy SSL Certificate to Bitnami>Apache v2.4.23
The 2019 Stack Overflow Developer Survey Results Are InSSL certificate paths in a virtual hostWildcard SSL on Debian 7, Apache2 not working. (Rackspace Cloud Server)Discerning GoDaddy SSL Certificate TypesInstall godaddy ssl certificate on amazon ec2How to Check if a SSL Certificate is successfully renewedUnbuntu server running Apache with an SSL Cert IssueSSL not working with Apache on WindowsSSL: CHAIN PROBLEMS! >> GoDaddy + Apache 2.4.23 on WINDOWS 2012 R2Secure GoDaddy site with Azure SSL CertificateLet's Encrypt wildcard certificates and Apache 2 not working
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I successfully created a CSR and downloaded the Apache SSL Certificates from Go Daddy. I received "257c0515593b569.crt" & "gd_bundle-g2-g1.crt". I've rigorously searched and tried finding a solution to installing the new SSL Certificates, however no luck as https still displays the warning message.
Both GD certificates are now at "bitnami/apache2/conf/" where the self-made server.csr, server.key & cert.csr. I tried copy&pasting the GD onto these, apache would not restart successfully. I tried the below:
conf/bitnami/Bitnami.conf
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
And again no successful restart.
How am I to remove the old and successfully replace it with you new? Any help please...
---EDIT--- VH default settings as found in httpd-ssl.conf file
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/server-ca.crt"
SSLCACertificatePath "/opt/bitnami/apache2/conf/ssl.crt"
SSLCACertificateFile "/opt/bitnami/apache2/conf/ssl.crt/ca-bundle.crt"
apache-2.4 ssl-certificate godaddy bitnami
add a comment |
I successfully created a CSR and downloaded the Apache SSL Certificates from Go Daddy. I received "257c0515593b569.crt" & "gd_bundle-g2-g1.crt". I've rigorously searched and tried finding a solution to installing the new SSL Certificates, however no luck as https still displays the warning message.
Both GD certificates are now at "bitnami/apache2/conf/" where the self-made server.csr, server.key & cert.csr. I tried copy&pasting the GD onto these, apache would not restart successfully. I tried the below:
conf/bitnami/Bitnami.conf
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
And again no successful restart.
How am I to remove the old and successfully replace it with you new? Any help please...
---EDIT--- VH default settings as found in httpd-ssl.conf file
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/server-ca.crt"
SSLCACertificatePath "/opt/bitnami/apache2/conf/ssl.crt"
SSLCACertificateFile "/opt/bitnami/apache2/conf/ssl.crt/ca-bundle.crt"
apache-2.4 ssl-certificate godaddy bitnami
gd_bundle-g2-g1.crt
is surely not a key file. It's probably a chain file.
– Wumpus Q. Wumbley
Apr 9 '18 at 20:10
it surely is a GD bundle: certs.godaddy.com/repository
– jouell
Apr 10 '18 at 14:44
add a comment |
I successfully created a CSR and downloaded the Apache SSL Certificates from Go Daddy. I received "257c0515593b569.crt" & "gd_bundle-g2-g1.crt". I've rigorously searched and tried finding a solution to installing the new SSL Certificates, however no luck as https still displays the warning message.
Both GD certificates are now at "bitnami/apache2/conf/" where the self-made server.csr, server.key & cert.csr. I tried copy&pasting the GD onto these, apache would not restart successfully. I tried the below:
conf/bitnami/Bitnami.conf
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
And again no successful restart.
How am I to remove the old and successfully replace it with you new? Any help please...
---EDIT--- VH default settings as found in httpd-ssl.conf file
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/server-ca.crt"
SSLCACertificatePath "/opt/bitnami/apache2/conf/ssl.crt"
SSLCACertificateFile "/opt/bitnami/apache2/conf/ssl.crt/ca-bundle.crt"
apache-2.4 ssl-certificate godaddy bitnami
I successfully created a CSR and downloaded the Apache SSL Certificates from Go Daddy. I received "257c0515593b569.crt" & "gd_bundle-g2-g1.crt". I've rigorously searched and tried finding a solution to installing the new SSL Certificates, however no luck as https still displays the warning message.
Both GD certificates are now at "bitnami/apache2/conf/" where the self-made server.csr, server.key & cert.csr. I tried copy&pasting the GD onto these, apache would not restart successfully. I tried the below:
conf/bitnami/Bitnami.conf
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
And again no successful restart.
How am I to remove the old and successfully replace it with you new? Any help please...
---EDIT--- VH default settings as found in httpd-ssl.conf file
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/server-ca.crt"
SSLCACertificatePath "/opt/bitnami/apache2/conf/ssl.crt"
SSLCACertificateFile "/opt/bitnami/apache2/conf/ssl.crt/ca-bundle.crt"
apache-2.4 ssl-certificate godaddy bitnami
apache-2.4 ssl-certificate godaddy bitnami
edited Apr 9 '18 at 19:42
Satain
asked Apr 8 '18 at 20:39
SatainSatain
11
11
gd_bundle-g2-g1.crt
is surely not a key file. It's probably a chain file.
– Wumpus Q. Wumbley
Apr 9 '18 at 20:10
it surely is a GD bundle: certs.godaddy.com/repository
– jouell
Apr 10 '18 at 14:44
add a comment |
gd_bundle-g2-g1.crt
is surely not a key file. It's probably a chain file.
– Wumpus Q. Wumbley
Apr 9 '18 at 20:10
it surely is a GD bundle: certs.godaddy.com/repository
– jouell
Apr 10 '18 at 14:44
gd_bundle-g2-g1.crt
is surely not a key file. It's probably a chain file.– Wumpus Q. Wumbley
Apr 9 '18 at 20:10
gd_bundle-g2-g1.crt
is surely not a key file. It's probably a chain file.– Wumpus Q. Wumbley
Apr 9 '18 at 20:10
it surely is a GD bundle: certs.godaddy.com/repository
– jouell
Apr 10 '18 at 14:44
it surely is a GD bundle: certs.godaddy.com/repository
– jouell
Apr 10 '18 at 14:44
add a comment |
2 Answers
2
active
oldest
votes
It looks like you have it misconfigured.
See https://stackoverflow.com/questions/4814851/why-is-sslcertificatekeyfile-needed-for-apache
You should put the private key in a file that is listed out by SSLCertificateKeyFile. server.key is the private key, don't overwrite it.
I've had a read and look around, even tried relating to this article: digicert.com/csr-ssl-installation/apache-openssl.htm however no luck as when i restart apache and try "domain..." Im still getting the 'NET::ERR_CERT_AUTHORITY_INVALID' unsecure page, http still working as normal. I've edited to show my <virtualhost> if its of any clarify
– Satain
Apr 9 '18 at 19:39
SSLCACertificateFile is for client auth via SSL. You don't mention you're doing that. I'd remove that directive. I'd also re-read the GoDaddy doc and see what was missed. If if were me, I would re-inventory all the files I have via openssl commands. I am a little concerned about the line: "tried copy&pasting the GD onto these" as far as what is what for your files.
– jouell
Apr 10 '18 at 14:46
add a comment |
I had to do this same thing recently on an older version of Bitnami. I was able to make it work by updating my /opt/bitnami/apache2/conf/bitnami/bitnami.conf
with the following changes (note I've used your file crt file names):
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
My version of Bitnami was installed in 2014, so they may have things setup different, but if not, I think you want to update the bitnami.conf
file like I did instead of httpd-ssl.conf
.
I also updated my /opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf
for the wordpress site we're running with the same values as above, but that likely doesn't apply in your case.
New contributor
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f906658%2funable-to-successfully-install-godaddy-ssl-certificate-to-bitnamiapache-v2-4-23%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
It looks like you have it misconfigured.
See https://stackoverflow.com/questions/4814851/why-is-sslcertificatekeyfile-needed-for-apache
You should put the private key in a file that is listed out by SSLCertificateKeyFile. server.key is the private key, don't overwrite it.
I've had a read and look around, even tried relating to this article: digicert.com/csr-ssl-installation/apache-openssl.htm however no luck as when i restart apache and try "domain..." Im still getting the 'NET::ERR_CERT_AUTHORITY_INVALID' unsecure page, http still working as normal. I've edited to show my <virtualhost> if its of any clarify
– Satain
Apr 9 '18 at 19:39
SSLCACertificateFile is for client auth via SSL. You don't mention you're doing that. I'd remove that directive. I'd also re-read the GoDaddy doc and see what was missed. If if were me, I would re-inventory all the files I have via openssl commands. I am a little concerned about the line: "tried copy&pasting the GD onto these" as far as what is what for your files.
– jouell
Apr 10 '18 at 14:46
add a comment |
It looks like you have it misconfigured.
See https://stackoverflow.com/questions/4814851/why-is-sslcertificatekeyfile-needed-for-apache
You should put the private key in a file that is listed out by SSLCertificateKeyFile. server.key is the private key, don't overwrite it.
I've had a read and look around, even tried relating to this article: digicert.com/csr-ssl-installation/apache-openssl.htm however no luck as when i restart apache and try "domain..." Im still getting the 'NET::ERR_CERT_AUTHORITY_INVALID' unsecure page, http still working as normal. I've edited to show my <virtualhost> if its of any clarify
– Satain
Apr 9 '18 at 19:39
SSLCACertificateFile is for client auth via SSL. You don't mention you're doing that. I'd remove that directive. I'd also re-read the GoDaddy doc and see what was missed. If if were me, I would re-inventory all the files I have via openssl commands. I am a little concerned about the line: "tried copy&pasting the GD onto these" as far as what is what for your files.
– jouell
Apr 10 '18 at 14:46
add a comment |
It looks like you have it misconfigured.
See https://stackoverflow.com/questions/4814851/why-is-sslcertificatekeyfile-needed-for-apache
You should put the private key in a file that is listed out by SSLCertificateKeyFile. server.key is the private key, don't overwrite it.
It looks like you have it misconfigured.
See https://stackoverflow.com/questions/4814851/why-is-sslcertificatekeyfile-needed-for-apache
You should put the private key in a file that is listed out by SSLCertificateKeyFile. server.key is the private key, don't overwrite it.
answered Apr 8 '18 at 22:22
jouelljouell
346215
346215
I've had a read and look around, even tried relating to this article: digicert.com/csr-ssl-installation/apache-openssl.htm however no luck as when i restart apache and try "domain..." Im still getting the 'NET::ERR_CERT_AUTHORITY_INVALID' unsecure page, http still working as normal. I've edited to show my <virtualhost> if its of any clarify
– Satain
Apr 9 '18 at 19:39
SSLCACertificateFile is for client auth via SSL. You don't mention you're doing that. I'd remove that directive. I'd also re-read the GoDaddy doc and see what was missed. If if were me, I would re-inventory all the files I have via openssl commands. I am a little concerned about the line: "tried copy&pasting the GD onto these" as far as what is what for your files.
– jouell
Apr 10 '18 at 14:46
add a comment |
I've had a read and look around, even tried relating to this article: digicert.com/csr-ssl-installation/apache-openssl.htm however no luck as when i restart apache and try "domain..." Im still getting the 'NET::ERR_CERT_AUTHORITY_INVALID' unsecure page, http still working as normal. I've edited to show my <virtualhost> if its of any clarify
– Satain
Apr 9 '18 at 19:39
SSLCACertificateFile is for client auth via SSL. You don't mention you're doing that. I'd remove that directive. I'd also re-read the GoDaddy doc and see what was missed. If if were me, I would re-inventory all the files I have via openssl commands. I am a little concerned about the line: "tried copy&pasting the GD onto these" as far as what is what for your files.
– jouell
Apr 10 '18 at 14:46
I've had a read and look around, even tried relating to this article: digicert.com/csr-ssl-installation/apache-openssl.htm however no luck as when i restart apache and try "domain..." Im still getting the 'NET::ERR_CERT_AUTHORITY_INVALID' unsecure page, http still working as normal. I've edited to show my <virtualhost> if its of any clarify
– Satain
Apr 9 '18 at 19:39
I've had a read and look around, even tried relating to this article: digicert.com/csr-ssl-installation/apache-openssl.htm however no luck as when i restart apache and try "domain..." Im still getting the 'NET::ERR_CERT_AUTHORITY_INVALID' unsecure page, http still working as normal. I've edited to show my <virtualhost> if its of any clarify
– Satain
Apr 9 '18 at 19:39
SSLCACertificateFile is for client auth via SSL. You don't mention you're doing that. I'd remove that directive. I'd also re-read the GoDaddy doc and see what was missed. If if were me, I would re-inventory all the files I have via openssl commands. I am a little concerned about the line: "tried copy&pasting the GD onto these" as far as what is what for your files.
– jouell
Apr 10 '18 at 14:46
SSLCACertificateFile is for client auth via SSL. You don't mention you're doing that. I'd remove that directive. I'd also re-read the GoDaddy doc and see what was missed. If if were me, I would re-inventory all the files I have via openssl commands. I am a little concerned about the line: "tried copy&pasting the GD onto these" as far as what is what for your files.
– jouell
Apr 10 '18 at 14:46
add a comment |
I had to do this same thing recently on an older version of Bitnami. I was able to make it work by updating my /opt/bitnami/apache2/conf/bitnami/bitnami.conf
with the following changes (note I've used your file crt file names):
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
My version of Bitnami was installed in 2014, so they may have things setup different, but if not, I think you want to update the bitnami.conf
file like I did instead of httpd-ssl.conf
.
I also updated my /opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf
for the wordpress site we're running with the same values as above, but that likely doesn't apply in your case.
New contributor
add a comment |
I had to do this same thing recently on an older version of Bitnami. I was able to make it work by updating my /opt/bitnami/apache2/conf/bitnami/bitnami.conf
with the following changes (note I've used your file crt file names):
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
My version of Bitnami was installed in 2014, so they may have things setup different, but if not, I think you want to update the bitnami.conf
file like I did instead of httpd-ssl.conf
.
I also updated my /opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf
for the wordpress site we're running with the same values as above, but that likely doesn't apply in your case.
New contributor
add a comment |
I had to do this same thing recently on an older version of Bitnami. I was able to make it work by updating my /opt/bitnami/apache2/conf/bitnami/bitnami.conf
with the following changes (note I've used your file crt file names):
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
My version of Bitnami was installed in 2014, so they may have things setup different, but if not, I think you want to update the bitnami.conf
file like I did instead of httpd-ssl.conf
.
I also updated my /opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf
for the wordpress site we're running with the same values as above, but that likely doesn't apply in your case.
New contributor
I had to do this same thing recently on an older version of Bitnami. I was able to make it work by updating my /opt/bitnami/apache2/conf/bitnami/bitnami.conf
with the following changes (note I've used your file crt file names):
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/257c0515593b569.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
SSLCertificateChainFile "/opt/bitnami/apache2/conf/gd_bundle-g2-g1.crt"
My version of Bitnami was installed in 2014, so they may have things setup different, but if not, I think you want to update the bitnami.conf
file like I did instead of httpd-ssl.conf
.
I also updated my /opt/bitnami/apps/wordpress/conf/httpd-vhosts.conf
for the wordpress site we're running with the same values as above, but that likely doesn't apply in your case.
New contributor
New contributor
answered 13 hours ago
brendanwbbrendanwb
1
1
New contributor
New contributor
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f906658%2funable-to-successfully-install-godaddy-ssl-certificate-to-bitnamiapache-v2-4-23%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
gd_bundle-g2-g1.crt
is surely not a key file. It's probably a chain file.– Wumpus Q. Wumbley
Apr 9 '18 at 20:10
it surely is a GD bundle: certs.godaddy.com/repository
– jouell
Apr 10 '18 at 14:44