Preview comment

The user verification code you entered is not correct.

Reply



The content of this field is kept private and will not be shown publicly.


*

  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <i> <b> <u>
  • Lines and paragraphs break automatically.
  • Web and e-mail addresses are automatically converted into links.
  • You may quote other posts using [quote] tags.
  • Easily link to terms in various wikis. For help, see interwiki.
  • Easily link to terms in various wikis. For help, see interwiki.
  • You may quote other posts using [quote] tags.
  • You can use BBCode tags in the text, URLs will be automatically converted to links
Verify comment authorship
Captcha Image: you will need to recognize the text in it.
*
Please type in the letters/numbers that are shown in the image above.

Intermediate SSL Certificates

Submitted by Bill St. Clair on Wed, 2008-06-18 07:20.

At the end of January, I installed an SSL certificate on this web site. I initially got a free certificate from cacert.org. That worked, but I had to tell my browsers to import their root certificate in order to stop security warnings. So I switched to a GoDaddy certificate, thinking that it would work. Same problem. Well, yesterday I installed a GoDaddy certificate at another site, and this time I read GoDaddy's instructions (may require an account). Turns out that they, and many other SSL vendors, don't sign their certificates with their root certificate authority (CA). They use an intermediate certificate, which establishes a chain of trust to the root CA. That intermediate certificate needs to be installed on the web server. Today, I asked the Site5 folks to install that intermediate certificate, and, voila, no more browser complaints. Unfortunately, my iPhone still complains. Guess it's missing the root of the chain, the "Go Daddy Secure Certification Authority", or Apple left out the intermediate certificate part of the validation process. Sigh...

( categories: Webmaster stuff )