Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: error (nike.apache.org: local policy)
Message-ID: <5522DF68.4080100@pipping.org>
Date: Mon, 06 Apr 2015 21:32:56 +0200
From: Sebastian Pipping <sebastian@pipping.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: users@httpd.apache.org
References: <1428341056.11322.10.camel@narod.ru>
	 <5522D0FE.2040108@pipping.org> <1428347245.11322.16.camel@narod.ru>
In-Reply-To: <1428347245.11322.16.camel@narod.ru>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] StartSSL (not self-signed) cert but says "The
 certificate
 is not trusted because it is self-signed"

On 06.04.2015 21:07, Victor Porton wrote:
>> How did you prepare those?
>> Did you follow the StartSSL steps on the website wizard and obtained
>> both of these files through downloading from their website?
>>
> I've obtained both the certificate and the key (which I have deciphered
> on my machine) from StartSSL.
> 
> I have copy&pasted them from their site's control panel (if it is called
> control panel).

I just refound this screenshot story of the process:

https://github.com/ioerror/duraconf/tree/master/startssl#user-content-startssl

You could compare if anything went different for you, if you like.


> I've verified my cert for a domain (withoutvowels.org) not for an IP. So
> I wonder where "d1stkfactory" got from.

Have you tried

  fgrep -R d1stkfactory /etc

?


> Please explain how to disable SSLv3 in Apache.

That would be

  SSLProtocol             all -SSLv2 -SSLv3

https://wiki.mozilla.org/Security/Server_Side_TLS#Apache

Best,


Sebastian


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org