SSL cert question

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

SSL cert question

Steve Upton

Likely an Apache question but I'm not sure and I trust you folks on this list…

Our SSL cert is expiring and our ISP (who has resold certs and installed them in the past) is having trouble getting it into the server. It's weird as we haven't changed anything in several years.

Anyway a few facts:

        OS X 10.4 server
        Apache 1.3.x
        Lasso 8.5.x

The new certificate is on the machine and entered into the apache site file and after restarting both Apache and Lasso the server is still only sending out the old cert.

Has anyone seen this before?

thanks in advance

Steve Upton


#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso
[hidden email]
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: SSL cert question

Trevor Borgmeier

on 10/4/12 7:30 PM Steve Upton wrote:

> Likely an Apache question but I'm not sure and I trust you folks on this list�
>
> Our SSL cert is expiring and our ISP (who has resold certs and installed them in the past) is having trouble getting it into the server. It's weird as we haven't changed anything in several years.
>
> Anyway a few facts:
>
> OS X 10.4 server
> Apache 1.3.x
> Lasso 8.5.x
>
> The new certificate is on the machine and entered into the apache site file and after restarting both Apache and Lasso the server is still only sending out the old cert.
>
> Has anyone seen this before?
It sounds like you're still referencing the old crts/keys in the vhost.  
Have you double-checked that the new cert(s)/key are in the correct
location(s) and the path in the vhost is correct for the new certs/keys?

#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso
[hidden email]
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: SSL cert question

Wade Maxfield
In reply to this post by Steve Upton
On 5/10/2012, at 1:30 PM, Steve Upton <[hidden email]> wrote:

>
> The new certificate is on the machine and entered into the apache site file and after restarting both Apache and Lasso the server is still only sending out the old cert.
>
> Has anyone seen this before?

How are you restarting apache?  apachectl graceful isn't enough, it needs to be a apachectl stop followed by apachectl start

Also check the apache error log and/or system.log just in case there's a clue in there.

 - Wade


#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso
[hidden email]
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>
Reply | Threaded
Open this post in threaded view
|

Re: SSL cert question

Steve Upton

On Oct 4, 2012, at 6:01 PM, Wade Maxfield <[hidden email]> wrote:

> On 5/10/2012, at 1:30 PM, Steve Upton <[hidden email]> wrote:
>
>>
>> The new certificate is on the machine and entered into the apache site file and after restarting both Apache and Lasso the server is still only sending out the old cert.
>>
>> Has anyone seen this before?
>
> How are you restarting apache?  apachectl graceful isn't enough, it needs to be a apachectl stop followed by apachectl start
>
> Also check the apache error log and/or system.log just in case there's a clue in there.

thanks, I'll give that a try. I don't know what they were doing….

Steve


#############################################################
This message is sent to you because you are subscribed to
  the mailing list Lasso
[hidden email]
To unsubscribe, E-mail to: <[hidden email]>
Send administrative queries to  <[hidden email]>