[Spce-user] Configuring SSL certificates

[Andrew Pogrebennyk]

On 03/07/2012 07:49 PM, Kevin Blackman wrote:
> OK - this has been resolved, seems it was an issue of white space at the end of the lines in the CRT and crt files.
> The query concerning intermediate CA file config via config.yml remains open...

Please check
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcertificatechainfile

AFAIR if you the following trust heirarchy:

trusted root
  - inter 1
       - inter 2
             - server.example.com.crt

You may construct the crt file in this exact order:

cat server.example.com.crt > chain-server.example.com.crt
cat inter2.crt >> chain-server.example.com.crt
cat inter1.crt >> chain-server.example.com.crt

And then specify resulting file in SSLCertificateChainFile.

The apache configuration is not under templates (yet) so you can edit
your httpd.conf directly.