Hi, SSLCertificateFile and SSLCertificateKeyFile are for your certificate and key - they can be self signed or signed by a CA. If they are signed by a CA, you shoud use the SSLCertificateChainFile directive for the root and possibly the intermidiate certificate. You should check out the manual: http://httpd.apache.org/docs/2.0/ssl/ The faq is very helpful, but take some time to read the hole thing. Take care edwardspl@xxxxxxxxxx wrote: > Hello Bruno, > > So...what is the CA come from the Web ? > > SSLCertificateFile /etc/pki/tls/certs/localhost.crt > SSLCertificateKeyFile /etc/pki/tls/private/localhost.key > > Is it a sample of Root CA ? > > Edward. > > Bruno Teixeira wrote: > >> Edward, >> >> the SSLCertificateChainFile directive should indicate a file with both >> the root and intermediate certificates. >> >> http://certs.ipsca.com/support >> >> Take care. >> >> Bruno Teixeira >> >> edwardspl@xxxxxxxxxx wrote: >> >>> >>> -------- Original Message -------- >>> Subject: Root CA ( SSL ) of Web Service >>> Date: Wed, 21 Feb 2007 18:11:51 +0800 >>> From: edwardspl@xxxxxxxxxx >>> Reply-To: For users of Fedora <fedora-list@xxxxxxxxxx> >>> To: fedora-list@xxxxxxxxxx <fedora-list@xxxxxxxxxx> >>> >>> >>> >>> Dear All, >>> >>> For apache 2.x, which command Syntax for Root CA ? >>> >>> SSLCertificateFile /etc/pki/tls/certs/localhost.crt >>> SSLCertificateKeyFile /etc/pki/tls/private/localhost.key >>> #SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt >>> #SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt >>> >>> Edwad. >>> >>> -- >>> fedora-list mailing list >>> fedora-list@xxxxxxxxxx >>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list >>> >>> >> >> --------------------------------------------------------------------- >> The official User-To-User support forum of the Apache HTTP Server >> Project. >> See <URL:http://httpd.apache.org/userslist.html> for more info. >> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx >> " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx >> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx >> >> > > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|