cancel
Showing results for 
Search instead for 
Did you mean: 
johnrev
Novice

SSL - Trying to install on apache/bitnami - What is the bundle???

When you download your SSL cert it includes <randomcharacters>.crt and another containing <gd_bundle...>.crt

 

Just wondering what is the bundle file and what does it do? as I'm trying to set it up in apache and if I try and use the <randomcharacters>.crt file it does not allow me to restart apache..

 

 

I'm using the wordpress image that comes with lightsail from aws.

I logged on to bitnami over ssh
and generated a new csr:
sudo openssl req -new -key /opt/bitnami/apache2/conf/server.key -out /opt/bitnami/apache2/conf/cert.csr

 

From there I updated the csr in godaddy and downloaded the new certificate.

 

The download of the ssl cert from godaddy which when you download the apache version it comes with 2 files:
a22b460110fcac1c.crt
and
gd_bundle-g2-g1.crt

 

From here I uploaded them to /opt/bitnami/apache2/conf

then in /opt/bitnami/apache2/conf/bitnami bitnami.conf updated the cert to use
a22b460110fcac1c.crt

 

but there is no key file that comes with the godaddy download. I was wondering what I should be doing with the line:
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"

do I also need to add a reference to: gd_bundle-g2-g1.crt for some reason?

 

I've then set permissions using:
sudo chown root:root /opt/bitnami/apache2/conf/server*
sudo chmod 600 /opt/bitnami/apache2/conf/server*

 

I then go to restart apache and it won't restart with an error message: "httpd could not be started monitored apache"

 

I'm not sure which of the 2 godaddy certs in the zip is the right one and if i need to be doing anything with a key file or something else

 

Sorry very new to all of this.. but just renaming and uploading and changing permissions and restarting isn't working out for me.

 

Any help would be awesome!

4 REPLIES
GoDaddy Pro Trusted Advisor
GoDaddy Pro Trusted Advisor

Re: SSL - Trying to install on apache/bitnami - What is the bundle???

Hi @johnrev, welcome to the community! Smiley Happy

 

Can you tell me what linux distro are you using?

 

 

If you find my replies helpful, give me a like or kudo Smiley Happy
And if I solved your issue, mark it as solution Smiley Very Happy
YSL
Novice

Re: SSL - Trying to install on apache/bitnami - What is the bundle???

I second the 2 cert confusion. The instructions I'm following ask for one .crt file, which to use?

b2f0xb5be18la1ec.crt (doctored name)

gd_bundle-g2-g1.crt

https://cloud.google.com/compute/docs/load-balancing/http/ssl-certificates

I'm also using a apache/bitnami LAMP vm (Debian 8).

YSL
Novice

Re: SSL - Trying to install on apache/bitnami - What is the bundle???

Update: I tried gd_bundle-g2-g1.crt and it failed harmlessly but the other key worked. 

YSL
Novice

Re: SSL - Trying to install on apache/bitnami - What is the bundle???

After more digging:

It's an intermediate certificate. This will tell you all about it and how to address it.
https://www.godaddy.com/help/what-is-an-intermediate-certificate-868
https://www.godaddy.com/help/nginx-on-centos-7-install-a-certificate-27192

FYI: I had to do this to merge the cert's:  (helpfully it'll help if you're on debian 8)
sudo bash -c 'cat d9d5s2b4f70394035.crt gd_bundle-g2-g1.crt >> sentworkscert.crt'