Jump to content

Recommended Posts

Posted

For any or all of your plans, with a Let's Encrypt certificate, do you use the SSLCertificateChainFile directive or append the relevant intermediate certificate to the server/domain certificate so that the client receives the intermediate certificates?

My reason for asking is I use Firefox which newly installed only includes the root X1 & X2 certificates and throws a wobbly if the server doesn't send the intermediate(s), or connects but issues a warning if the intermediate is user imported.

Usage over time will probably find the intermediates installed from other sites which send the complete chain, but I'd like it to work correctly first time.
 

Posted

We use Plesk's implementation for getting LE certificates, and I believe it does supply the intermediates.

We've never had a user report issues with LE certificates not verifying on Firefox due to missing roots or intermediates, though I know FF works a bit differently from other browsers.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...