Can you try this? SSLCertificateFile /etc/letsencrypt/live/www.russel.org.uk/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/www.russel.org.uk/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/www.russel.org.uk/fullchain.pem ----- Original Message ----- > From: "Russel Winder" <russel@xxxxxxxxxxxxx> > To: test@xxxxxxxxxxxxxxxxxxxxxxx > Sent: Sunday, April 10, 2016 4:41:33 PM > Subject: Re: DNF and https > > On Sun, 2016-04-10 at 08:55 -0400, Igor Gnatenko wrote: > > > […] > > how did you set SSL there? I guess a bit wrongly.. > > SSLEngine on > SSLCertificateFile "/etc/letsencrypt/live/www.russel.org.uk/cer > t.pem" > SSLCertificateKeyFile "/etc/letsencrypt/live/www.russel.org.uk/ > privkey.pem" > SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5 > SSLHonorCipherOrder on > > The SSL key covers three domains hence the russel rather than winder in > the path. > > I am by no means an expert at Apache configuration, so I can well > believe I have made an error. > > > CN in ur cert is Let's Encrypt Authority X3, in my case where it > > works correctly - Let's Encrypt Authority X1 > > I just got a key from them three months ago and renewed two days ago. I > have no idea what the X3/X1 signify! > > > Please show settings of your webserver.. > > Is the above what you were asking for? If not I can post other > snippets. > > -- > Russel. > ============================================================================= > Dr Russel Winder t: +44 20 7585 2200 voip: sip:russel.winder@xxxxxxxxx > 41 Buckmaster Road m: +44 7770 465 077 xmpp: russel@xxxxxxxxxxxxx > London SW11 1EN, UK w: www.russel.org.uk skype: russel_winder > -- > test mailing list > test@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe: > http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx -- -Igor Gnatenko -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: http://lists.fedoraproject.org/admin/lists/test@xxxxxxxxxxxxxxxxxxxxxxx
