7 messages in ru.sysoev.nginxRe: SSL Chain Cert
FromSent OnAttachments
Attila NagyAug 16, 2007 9:26 am 
Igor SysoevAug 16, 2007 10:40 am 
Igor SysoevAug 16, 2007 11:21 am.txt
Attila NagyAug 17, 2007 12:26 am 
Riku RäisänenAug 17, 2007 1:00 am 
Igor SysoevAug 17, 2007 1:03 am 
Riku RäisänenAug 17, 2007 1:20 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: SSL Chain CertActions...
From:Igor Sysoev (is-G@public.gmane.org)
Date:Aug 17, 2007 1:03:36 am
List:ru.sysoev.nginx

On Fri, Aug 17, 2007 at 11:00:34AM +0300, Riku R?is?nen wrote:

I've tried to install a SSL Chain Cert with no success.

configuration:

ssl_certificate /etc/ssl/mail.domain.com.crt; ssl_certificate_key /etc/ssl/mail.domain.com.key; ssl_client_certificate /etc/ssl/ca-bundle.crt;

the ssl_client_certificate is the bundled chain cert that is needed for my SSL certificate to work. Is my configuration wrong? Does nginx have support for chain certs?

cat ca-bundle.crt mail.domain.com.crt > super-bundle.crt

ssl_certificate /etc/ssl/super-bundle.crt; ssl_certificate_key /etc/ssl/mail.domain.com.key;

ssl_client_certificate is used to check clients certificates, it as same as Apache's SSLCACertificateFile: http://www.modssl.org/docs/2.8/ssl_reference.html#ToC14

-- Igor Sysoev http://sysoev.ru/en/