When you download your SSL cert it includes <randomcharacters>.crt and another containing <gd_bundle...>.crt
Just wondering what is the bundle file and what does it do? as I'm trying to set it up in apache and if I try and use the <randomcharacters>.crt file it does not allow me to restart apache..
I'm using the wordpress image that comes with lightsail from aws.
I logged on to bitnami over ssh
and generated a new csr:
sudo openssl req -new -key /opt/bitnami/apache2/conf/server.key -out /opt/bitnami/apache2/conf/cert.csr
From there I updated the csr in godaddy and downloaded the new certificate.
The download of the ssl cert from godaddy which when you download the apache version it comes with 2 files:
From here I uploaded them to /opt/bitnami/apache2/conf
then in /opt/bitnami/apache2/conf/bitnami bitnami.conf updated the cert to use
but there is no key file that comes with the godaddy download. I was wondering what I should be doing with the line:
do I also need to add a reference to: gd_bundle-g2-g1.crt for some reason?
I've then set permissions using:
sudo chown root:root /opt/bitnami/apache2/conf/server*
sudo chmod 600 /opt/bitnami/apache2/conf/server*
I then go to restart apache and it won't restart with an error message: "httpd could not be started monitored apache"
I'm not sure which of the 2 godaddy certs in the zip is the right one and if i need to be doing anything with a key file or something else
Sorry very new to all of this.. but just renaming and uploading and changing permissions and restarting isn't working out for me.
Any help would be awesome!
Solved! Go to Solution.
Hi @johnrev, welcome to the community! 🙂
Can you tell me what linux distro are you using?
I second the 2 cert confusion. The instructions I'm following ask for one .crt file, which to use?
b2f0xb5be18la1ec.crt (doctored name)
I'm also using a apache/bitnami LAMP vm (Debian 8).
After more digging:
It's an intermediate certificate. This will tell you all about it and how to address it.
FYI: I had to do this to merge the cert's: (helpfully it'll help if you're on debian 😎
sudo bash -c 'cat d9d5s2b4f70394035.crt gd_bundle-g2-g1.crt >> sentworkscert.crt'