The party on which the intermediate certificate is installed by apache
Editor to share with you how to install the intermediate certificate in apache. I hope you will gain a lot after reading this article. Let's discuss it together.
In order to ensure that Apache is compatible with all browsers, we must install an intermediate certificate on the server. Please download it from the intermediate certificate download tool, enter your Server.crt, and then download the intermediate certificate. Please save the intermediate certificate as Chain.crt.
Download certificate
If you do not receive the email, you can also go directly to the console and download the signed server certificate and the corresponding intermediate certificate.
Please go to the console-order query-check. At the end of the order details, you can download directly:
In the red box on the left, download the server certificate and save it as Server.crt
In the red box on the right, download the intermediate certificate and save it as Chain.crt.
Apache version 2.4.8 or later
Since version 2.4.8 (including 2.4.8) of Apache, the configuration of the certificate has been modified and the parameter SSLCertificateChainFile has been cancelled.
First of all, we need to add the intermediate certificate Chain.crt to the server certificate Server.crt file. Please copy and paste all the contents of Chain.crt into Server.crt in the following order: the first paragraph, server certificate; the second paragraph, intermediate certificate, as follows:
-BEGIN CERTIFICATE-MIIEsTCCA5mgAwIBAgIDBfoqMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT... Server certificate... T0hUGo/wiwTBUafyk1A+LlSUE+dYqzbHYV9Q4d83UIzz9vXO4wmSRgV0udjGN2GRW7oiGmI=-END CERTIFICATE-BEGIN CERTIFICATE-MIIEsTCCA5mgAwIBAgIDBfoqMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT... Intermediate certificate... T0hUGo/wiwTBUafyk1A+LlSUE+dYqzbHYV9Q4d83UIzz9vXO4wmSRgV0udjGN2GRW7oiGmI=-END CERTIFICATE-
Upload the modified Server.crt and Server.key files to the server, and then modify the Apache configuration file: httpd.conf (some versions will put the ssl configuration in httpd-ssl.conf or ssl.conf), and add the following parameters:
Listen 443 DocumentRoot "${SRVROOT} / htdocs" ServerName www.example.com:443ServerAdmin admin@example.comSSLEngine onSSLProtocol-all + TLSv1 + TLSv1.1 + TLSv1.2SSLCipherSuite ECDHEV AES128 SRVROOT / conf/server.crt "SSLCertificateKeyFile" ${SRVROOT} / conf/server.key "
After reading this article, I believe you have a certain understanding of the apache installation of the intermediate certificate, want to know more related knowledge, welcome to follow the industry information channel, thank you for reading!
