I am setting up a website with SSL: https://coalitionportelgin.ca The SSL connection works (and intermediate certificates are retrieved) in Chrome on Linux, OS-X, and Win… (читать ещё)
I am setting up a website with SSL: https://coalitionportelgin.ca The SSL connection works (and intermediate certificates are retrieved) in Chrome on Linux, OS-X, and Windows 7; ChromeOS; Firefox (18.0) on OS-X and Linux; and Safari on OS-X, iOS, and Windows.
However, I am still getting connection errors on Firefox 18.0 on Windows 7 and on all Android browsers, with "This Connection is Untrusted...because no issuer chain was provided."
This diagnostic tool shows the certificate chain is being pulled, but still reports "Unable to get the local issuer of the certificate. The issuer of a locally looked up certificate could not be found."
Intermediate certificate is installed:
$ ls /etc/ssl/certs |grep GandiStandardSSLCA.pem
And it is being pointed to:
$ grep -i -r "SSLCertificateChainFile" /etc/apache2/
/etc/apache2/sites-available/000-coalitionportelgin.ca-ssl: SSLCertificateChainFile /etc/ssl/certs/GandiStandardSSLCA.pem
/etc/apache2/sites-enabled/000-coalitionportelgin.ca-ssl: SSLCertificateChainFile /etc/ssl/certs/GandiStandardSSLCA.pem
/etc/apache2/httpd.conf: SSLCertificateChainFile /etc/ssl/certs/GandiStandardSSLCA.pem
For good measure, the intermediate and root certificates have also been appended to the server certificate.
I have followed all steps indicated by the cert provider, as well as other sources, and have spent hours troubleshooting this. I don't see anything more to be done. Is this a problem of server configuration (and if so, what?) or is this a problem that I can't do anything about?