search

bumptech / stud

The Scalable TLS Unwrapping Daemon
Other
1.43k stars 194 forks source link

How to avoid untrusted issuer warnings with https (The certificate is self-signed, etc) #104

Closed aaronpeterson closed 12 years ago

aaronpeterson commented 12 years ago

I can't seem to figure out the magic recipe for the single pem-file Stud requires. If I append the private key that I used for the CSR I can at least start Stud but when omitted it dies with the "Error loading rsa private key" error. When I get it started I still receive the "self-signed" error. I used http://www.sslshopper.com/ssl-checker.html with same result.

I've tried various concatenation orders including each of 1) the domain cert delivered to me from the trusted issuer 2) their Intermediate Certificate, and 3) the private key used during CSR generation using OpenSSL.

Will Stud always produce this warning?

aaronpeterson commented 12 years ago

Sorry for cluttering Issues up with this embarrassing non-issue. For anyone searching, the correct pem concatenation order is indeed 1) domain cert from trusted issuer, 2) root ca or intermediary cert, 3) private key used for csr. I didn't realize that apache was running (by default) on 443 with a (wait for it...) self-signed cert.