SSL Certificate Installation problem

Applications Web Development
1

Hello everybody
Hope somebody can help me

I'm trying to install SSL Certificate on Apache/mod_ssl on Linux with Zend for Oracle.

I bought and downloaded certificate from certificate from Network Solutions. Than I followed the instructions to the dot.

I created a directory for certificate

[root@online ssl]# pwd
/usr/local/Zend/apache2/ssl
[root@online ssl]# ls -la
total 40
drwxrwxrwx   2 root root 4096 Jan  8 17:14 .
drwxr-xr-x  18 root root 4096 Jan  6 11:41 ..
-rwxrwxrwx   1 root root 3199 Jan  8 17:12 Apache_Plesk_Install.txt
-rwxrwxrwx   1 root root  887 Jan  8 17:10 myserver.key
-rwxrwxrwx   1 root root 1776 Jan  8 16:58 ONLINE.ODL.COM.crt

Than I modified httpd.conf file to add

SSLCertificateFile /usr/local/Zend/apache2/ssl/ONLINE.ODL.COM.crt
SSLCertificateKeyFile /usr/local/Zend/apache2/ssl/myserver.key
SSLCertificateChainFile /usr/local/Zend/apache2/ssl/Apache_Plesk_Install.txt

Than I restarted apache (and the server too). Than go to the my website and it still shows security alert, and old (homegenerated by previous guy) certificate info. Like nothing changed.

The funny thing is, I did a search for *.crt files on my server and found this directory, with the date exactly matching the start date that certificate window in IE shows (March 21). It sure looks like that's what outside world see instead of the right certificate:

[root@online ssl]# ls -la /usr/local/Zend/apache2/conf/ssl.key/
total 100
drwxr-xr-x  4 root root 4096 Mar 21  2007 .
drwxr-xr-x  3 root root 4096 Jan  8 17:21 ..
-rw-r--r--  1 root root 4720 Mar 21  2007 ca.crt
-rw-r--r--  1 root root 2151 Mar 21  2007 class3.crt
drwxr-xr-x  2 root root 4096 Mar 21  2007 new
-rw-r--r--  1 root root 1172 Mar 21  2007 rootca.crt
-rw-r--r--  1 root root 2569 Mar 21  2007 root.crt
drwxr-xr-x  2 root root 4096 Mar 21  2007 save
-rw-r--r--  1 root root 1732 Mar 21  2007 server.crt
-rw-r--r--  1 root root 1058 Mar 21  2007 server.csr
-r--r--r--  1 root root 1675 Mar 21  2007 server.key
-rw-r--r--  1 root root 1743 Mar 21  2007 server.key.original

What am I missing?

2

Possibly you have a <virtualhost> entry in which SSL options are overriding the global ones. Also, your certs are world-writable. Make the permissions match the one inside the ssl.key directory (including the directory itself!) that locate found.

3

Do a grep through all your apache conf files for the name of the old crt file, to see where it references that file. You may have to do it recursively, if the previous guy created a subdirectory and included a conf file from there.

The alternative lazy way: you can rename your three files and replace the previous guy's files with yours, and then take your modifications out of the conf file.