(60) Peer's certificate issuer has been marked as not trusted by the user: Linux/Apache

Question

I am trying to find out why my HTTPS link is not working for my website:

So I ran this command to try:

curl https://localhost/

I am using a valid signed SSL certificate and my HTTP link is working fine. I am using a Multi Domain certificate that was exported from an IIS 6 server. My instance on AWS has the 443 port enabled.

Here is a picture of my CA certificates:

I have tried to change the http.conf file's Virtual Host following the instructions in here: http://ananthakrishnanravi.wordpress.com/2012/04/15/configuring-ssl-and-https-for-your-website-amazon-ec2/

Is there any suggestions on how to get my website properly working on a HTTPS protocol?

Let me know if you need anymore information.

Thanks,

Solution 1

If you're not sure of the certificate that your web server is serving, you can use this command to view the certificate:

openssl s_client -showcerts -connect hostname.domain.tld:443

Also, the hostname in the certificate must match the site that you are requesting. For example, if you request a page from localhost, but your certificate is for www.yourdomain.com, the certificate check will fail.

Solution 2

This means that you are using a self-signed certificate.

In order for this warning not to appear, you need to purchase a certificate from a Certificate Authority.

Comments

[Lgalan90]

I believe this was purchased from a CA Authority. In my PKCS#7 I can see that my certificate was issued by AddTrust External CA Root and InCommon Server CA.

[Lgalan90]

My certificate has a SAN but it doesn't seem to be listed when inputting the command. I get this when I input name of the site, name.site.edu: No client certificate CA names sent ---SSL handshake has read 2708 bytes and written 561 bytes---New, TLSv1/SSLv3, Cipher is RC4-SHA Server public key is 2048 bit Secure Renegotiation IS NOT supported. When I input site.edu I get this: No client certificate CA names sent ---SSL handshake has read 3952 bytes and written 561 bytes--- New, TLSv1/SSLv3, Cipher is RC4-SHA Server public key is 2048 bit Secure Renegotiation IS supported.