Differences

This shows you the differences between two versions of the page.

--- public:radio:2025:yaddnet_ssl_renewal [15/03/25 07:25 GMT] – [15/03/25 : SSL certificates] john
+++ public:radio:2025:yaddnet_ssl_renewal [13/10/25 07:00 BST] (current) – [UPDATE ON TWO INTERMEDIATE CERTIFICATES 5/7/25] john
@@ Line 2: / Line 2: @@
-====== Yaddnet VPS SSL Renewal ======
+====== YaDDNet : VPS SSL Renewal ======
 ** Renewed SSL certificates for 2025/6 **
+<note important>Read the final part about combining the 2 intermediate certificates!</note>
 ===== 15/03/25 : SSL certificates =====
@@ Line 32: / Line 33: @@
       * check site security
-{{:public:radio:2025:screenshot_2025-03-15_064708.png?400|}}
+{{:public:radio:2025:screenshot_2025-03-15_072557.png?400|}}
   * swap ''ca.pem'' files (copy ''ca.pem.1'' -> ''ca.pem'')
@@ Line 101: / Line 102: @@
 ''sudo service apache2 restart''
+===== UPDATE ON TWO INTERMEDIATE CERTIFICATES 5/7/25 =====
+<note important>I've discovered that the 2 Intermediate Certificates are necessary to complete the //chain// of authority.
+</note>
+What should be done is to join them together into one //ca.pem// file (and in the correct order.... )
+**Don't rename the 2 files as ''ca.pem.1'' and ''ca.pem.2'' per the above  **
+Transfer them both with their **//original//** names and then ''cat'' them together
+<code bash>
+[root@yaddnet2:/home/g4slv/ssl]# cat 397A66CC2756362E0DAA87CA6EABE3B1.cer 7D5B5126B476BA11DB74160BBC530DA7.cer > ca.pem
+[root@yaddnet2:/home/g4slv/ssl]# cp ca.pem /usr/local/ssl
+[root@yaddnet2:/home/g4slv/ssl]# systemctl restart apache2
+</code>
+Check correct SSL operation at [[https://www.ssllabs.com/ssltest/analyze.html]]
@@ Line 109: / Line 136: @@
-{{tag>}}
+{{tag>yaddnet radio}}