Results 1 to 4 of 4

Thread: [SOLVED] GeoTrust Rapid SSL Invalid Certificate Chain

  1. #1
    brained is offline Loyal Member
    Join Date
    Dec 2005
    Posts
    94
    Rep Power
    9

    Default [SOLVED] GeoTrust Rapid SSL Invalid Certificate Chain

    Started with 5.0.9 NE on Ubuntu 6.06 LTS. It successfully used a SSL cert from GeoTrust.

    Last night I did the upgrade to 5.0.10 NE.
    It killed something - was getting ldap starttls errors.
    Followed the wiki - regenerated and installed a self-signed cert. That worked and got the mail flowing again.

    Now I just need to get my Commercial Cert back in so people stop getting web browser security errors.

    Used the admin GUI, generated a CSR. Requested a reissue of my cert using the new CSR. The new cert was delivered.

    Using the admin GUI again attempted to install the new cert and Equifax_Secure_Certificate_Authority.cer from GeoTrust (This is the one I used before).

    The error is Invalid Certificate Chain.

    Tested with all 8 different types of Root Certs from GeoTrust (https://www.geotrust.com/resources/r...tes/index.html) - same error.

    Doublechecked - it's not supposed to be a chained cert so no intermediate required.

    I've done run out of ideas.
    Last edited by brained; 10-08-2008 at 01:30 PM.

  2. #2
    brained is offline Loyal Member
    Join Date
    Dec 2005
    Posts
    94
    Rep Power
    9

    Default Solved

    The root certs on GeoTrust's website never did work. An eMail to GeoTrust resulted in them providing a root cert that did work.

  3. #3
    infocentric is offline Junior Member
    Join Date
    Jan 2006
    Location
    Oakland, CA
    Posts
    9
    Rep Power
    9

    Default

    Can you provide more information about how you asked for the root cert from GeoTrust or what the file is named? (or can you attach it to this forum thread?)

    I'm having trouble with a renewal cert and I think it may be caused by the fact that I don't have the correct root certificate installed.

    thx!

  4. #4
    infocentric is offline Junior Member
    Join Date
    Jan 2006
    Location
    Oakland, CA
    Posts
    9
    Rep Power
    9

    Default

    Here is the cert I was given by Geotrust support. This worked for me (when none of the ones on their downloads page did).

    -----BEGIN CERTIFICATE-----
    MIICkDCCAfmgAwIBAgIBATANBgkqhkiG9w0BAQQFADBaMQswCQ YDVQQGEwJVUzEc
    MBoGA1UEChMTRXF1aWZheCBTZWN1cmUgSW5jLjEtMCsGA1UEAx MkRXF1aWZheCBT
    ZWN1cmUgR2xvYmFsIGVCdXNpbmVzcyBDQS0xMB4XDTk5MDYyMT A0MDAwMFoXDTIw
    MDYyMTA0MDAwMFowWjELMAkGA1UEBhMCVVMxHDAaBgNVBAoTE0 VxdWlmYXggU2Vj
    dXJlIEluYy4xLTArBgNVBAMTJEVxdWlmYXggU2VjdXJlIEdsb2 JhbCBlQnVzaW5l
    c3MgQ0EtMTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuu cXkAJlsTRVPEnC
    UdXfp9E3j9HngXNBUmCbnaEXJnitx7HoJpQytd4zjTov2/KaelpzmKNc6fuKcxtc
    58O/gGzNqfTWK8D3+ZmqY6KxRwIP1ORROhI8bIpaVIRw28HFkM9yRc uoWcDNM50/
    o5brhTMhHD4ePmBudpxnhcXIw2ECAwEAAaNmMGQwEQYJYIZIAY b4QgEBBAQDAgAH
    MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUvqigdHJQa0S3ySPY+6j/s1dr
    aGwwHQYDVR0OBBYEFL6ooHRyUGtEt8kj2Puo/7NXa2hsMA0GCSqGSIb3DQEBBAUA
    A4GBADDiAVGqx+pf2rnQZQ8w1j7aDRRJbpGTJxQx78T3LUX47M e/okENI7SS+RkA
    Z70Br83gcfxaz2TE4JaY0KNA4gGK7ycH8WUBikQtBmV1UsCGEC AhX2xrD2yuCRyv
    8qIYNMR1pHMc8Y3c7635s3a0kr/clRAevsvIO1qEYBlWlKlV
    -----END CERTIFICATE-----

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Install a commercial SSL certificate ??
    By nick20 in forum Installation
    Replies: 6
    Last Post: 06-23-2010, 03:08 AM
  2. Installation zimbra Initializing ldap...failed. (28416)
    By farrukh.nadeem in forum Installation
    Replies: 10
    Last Post: 08-14-2009, 06:52 AM
  3. Replies: 4
    Last Post: 07-12-2008, 09:36 PM
  4. Problem with Mail Server - Need help!
    By joeleo in forum Installation
    Replies: 2
    Last Post: 03-04-2008, 12:03 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •