SSLServer check is showing Chain issues and low grade shar issues

rachalmers — Wed, 13 Sep 2017 08:08:11 GMT

I've installed the certs supplied by GoDaddy on Apache2. as follows.

SSLEngine on

    SSLCertificateFile "/private/etc/ssl/certs/bc68a15eec20e0d0.crt"
    SSLCertificateKeyFile "/private/etc/ssl/private/quantum-radio-private.key"
    SSLCACertificateFile "/private/etc/ssl/certs/gd_bundle-g2-g1.crt"
    SSLCertificateChainFile "/private/etc/ssl/certs/gd_intermediate.crt.pem"
    SSLVerifyDepth 1

However, a check with the Qualys SSLLabs checker returns a number of warnings.

Intermediate certificate has an insecure signature. Upgrade to SHA2 as soon as possible to avoid browser warnings.
This server's certificate chain is incomplete. Grade capped to B

Within the body of the output, this.

The site appears to work ok, but obviously, something is not right?

Signature algorithm SHA1withRSA INSECURE

Does anyone have any ideas before I call support?

thanks

Re: SSLServer check is showing Chain issues and low grade shar issues

rachalmers — Wed, 13 Sep 2017 08:32:08 GMT

Ok, I solved it.

This is not needed.

SSLCertificateChainFile "/private/etc/ssl/certs/gd_intermediate.crt.pem"

Commented it out, now everything is showing no errors. Nice.

Re: SSLServer check is showing Chain issues and low grade shar issues

rachalmers — Wed, 20 Sep 2017 09:42:30 GMT

Fixed

topic SSLServer check is showing Chain issues and low grade shar issues in SSL And Security

SSLServer check is showing Chain issues and low grade shar issues

Re: SSLServer check is showing Chain issues and low grade shar issues

Re: SSLServer check is showing Chain issues and low grade shar issues