[SOLVED] GeoTrust Rapid SSL Invalid Certificate Chain

[brained]

Started with 5.0.9 NE on Ubuntu 6.06 LTS. It successfully used a SSL cert from GeoTrust.

Last night I did the upgrade to 5.0.10 NE.
It killed something - was getting ldap starttls errors.
Followed the wiki - regenerated and installed a self-signed cert. That worked and got the mail flowing again.

Now I just need to get my Commercial Cert back in so people stop getting web browser security errors.

Used the admin GUI, generated a CSR. Requested a reissue of my cert using the new CSR. The new cert was delivered.

Using the admin GUI again attempted to install the new cert and Equifax_Secure_Certificate_Authority.cer from GeoTrust (This is the one I used before).

The error is Invalid Certificate Chain.

Tested with all 8 different types of Root Certs from GeoTrust (https://www.geotrust.com/resources/r...tes/index.html) - same error.

Doublechecked - it's not supposed to be a chained cert so no intermediate required.

I've done run out of ideas.

[brained]

The root certs on GeoTrust's website never did work. An eMail to GeoTrust resulted in them providing a root cert that did work.

[infocentric]

Can you provide more information about how you asked for the root cert from GeoTrust or what the file is named? (or can you attach it to this forum thread?)

I'm having trouble with a renewal cert and I think it may be caused by the fact that I don't have the correct root certificate installed.

thx!

[infocentric]

Here is the cert I was given by Geotrust support. This worked for me (when none of the ones on their downloads page did).

-----BEGIN CERTIFICATE-----
MIICkDCCAfmgAwIBAgIBATANBgkqhkiG9w0BAQQFADBaMQswCQ YDVQQGEwJVUzEc
MBoGA1UEChMTRXF1aWZheCBTZWN1cmUgSW5jLjEtMCsGA1UEAx MkRXF1aWZheCBT
ZWN1cmUgR2xvYmFsIGVCdXNpbmVzcyBDQS0xMB4XDTk5MDYyMT A0MDAwMFoXDTIw
MDYyMTA0MDAwMFowWjELMAkGA1UEBhMCVVMxHDAaBgNVBAoTE0 VxdWlmYXggU2Vj
dXJlIEluYy4xLTArBgNVBAMTJEVxdWlmYXggU2VjdXJlIEdsb2 JhbCBlQnVzaW5l
c3MgQ0EtMTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuu cXkAJlsTRVPEnC
UdXfp9E3j9HngXNBUmCbnaEXJnitx7HoJpQytd4zjTov2/KaelpzmKNc6fuKcxtc
58O/gGzNqfTWK8D3+ZmqY6KxRwIP1ORROhI8bIpaVIRw28HFkM9yRc uoWcDNM50/
o5brhTMhHD4ePmBudpxnhcXIw2ECAwEAAaNmMGQwEQYJYIZIAY b4QgEBBAQDAgAH
MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUvqigdHJQa0S3ySPY+6j/s1dr
aGwwHQYDVR0OBBYEFL6ooHRyUGtEt8kj2Puo/7NXa2hsMA0GCSqGSIb3DQEBBAUA
A4GBADDiAVGqx+pf2rnQZQ8w1j7aDRRJbpGTJxQx78T3LUX47M e/okENI7SS+RkA
Z70Br83gcfxaz2TE4JaY0KNA4gGK7ycH8WUBikQtBmV1UsCGEC AhX2xrD2yuCRyv
8qIYNMR1pHMc8Y3c7635s3a0kr/clRAevsvIO1qEYBlWlKlV
-----END CERTIFICATE-----