Question

A new SSL Certificate was installed under Top > Configuration Director > Miscellaneous Settings > SSL Setup > Certificate tab.

After that OBAS site was checked using the SSL Certificate Checker and the following error emerged:

The server is not sending the required intermediate certificate.

How to install the required intermediate certificate?

Answer

OBAS has no functionality to install an Intermediate Certificate via GUI. Thus, it should be done manually.

  1. Download the required intermediate certificate

  2. Check /etc/httpd/conf/hspc_frontend.conf for SSLCertificateChainFile entry:

    [root@server]# grep -i -r "SSLCertificateChainFile" /etc/httpd/conf/
/etc/httpd/conf/hspc_frontend.conf:     SSLCertificateChainFile conf/ssl.crt/IntermediatesCA3.crt

  3. Back up original IntermediatesCA3.crt to IntermediatesCA3.crt.bkp:

    [root@server]# cp /etc/httpd/conf/ssl.crt/IntermediatesCA3.crt /etc/httpd/conf/ssl.crt/IntermediatesCA3.crt.bkp

  4. Replace IntermediatesCA3.crt with the intermediate certificate downloaded on step 1:

    [root@server]# cp downloaded_certificate.crt /etc/httpd/conf/ssl.crt/IntermediatesCA3.crt

  5. Restart the Apache web server

    [root@server] service httpd restart

Internal content