https connection errors/chained certificates issue

[SyNeo]

Hi.

Both my PC, and this machine are in the same LAN, behind a NAT. We both share the same IP address. There is no access rule configured to prevent an access from this IP.

Firefox can access the site without any problems from this machine, but occasionally presents the "certificate expired message".

[mistwang]

Please try 2.1RC3, CA certificate configuration has been added, see if it help with the certificate expiring problem.

Occiationally, I can get connection problem from another laptop behind a NAT, a refresh usually fix it, but it takes pretty long time for the SSL handshake, and the certificate always shows as expired.

[mistwang]

Looks like the IE waits for the CA certificate, but the server did not send one, please double check that the chained certificate is being used, and chained certificate is set to "Yes".

If it is, then switch to the standalone server certificate and configure the CA Certifcate File just like what you will do with Apache after upgrading to RC3. The chained certificate should have the same effect though.

[mistwang]

Find the problem. :-)

The chained certificates has been loaded as a non-chained certificate, only the first certificate in the file has been loaded, so it will not be trusted by browsers.

With the updated RC3 release, chained certificates should have the same effect as server certificate + CA certificate.

I hope it is the cause of the connection problem as well. :-)

[SyNeo]

It works great now, and I haven't encountered any expiration warnings so far.

Thanks for the quick response!