Can you try this?
SSLCertificateFile /etc/letsencrypt/live/www.russel.org.uk/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/www.russel.org.uk/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/www.russel.org.uk/fullchain.pem
----- Original Message -----
From: "Russel Winder" <russel(a)winder.org.uk>
To: test(a)lists.fedoraproject.org
Sent: Sunday, April 10, 2016 4:41:33 PM
Subject: Re: DNF and https
On Sun, 2016-04-10 at 08:55 -0400, Igor Gnatenko wrote:
>
[…]
> how did you set SSL there? I guess a bit wrongly..
SSLEngine on
SSLCertificateFile "/etc/letsencrypt/live/www.russel.org.uk/cer
t.pem"
SSLCertificateKeyFile "/etc/letsencrypt/live/www.russel.org.uk/
privkey.pem"
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
SSLHonorCipherOrder on
The SSL key covers three domains hence the russel rather than winder in
the path.
I am by no means an expert at Apache configuration, so I can well
believe I have made an error.
> CN in ur cert is Let's Encrypt Authority X3, in my case where it
> works correctly - Let's Encrypt Authority X1
I just got a key from them three months ago and renewed two days ago. I
have no idea what the X3/X1 signify!
> Please show settings of your webserver..
Is the above what you were asking for? If not I can post other
snippets.
--
Russel.
=============================================================================
Dr Russel Winder t: +44 20 7585 2200 voip: sip:russel.winder@ekiga.net
41 Buckmaster Road m: +44 7770 465 077 xmpp: russel(a)winder.org.uk
London SW11 1EN, UK w:
www.russel.org.uk skype: russel_winder
--
test mailing list
test(a)lists.fedoraproject.org
To unsubscribe:
http://lists.fedoraproject.org/admin/lists/test@lists.fedoraproject.org