"This root certificate is not trusted"

Question

John Allen2 Author

Level 1

35 points

"This root certificate is not trusted"

I could use some help troubleshooting a Godaddy Turbo SSL certificate on my OS X 10.5.8 Server.

When I visit my OS X Server site, Safari shows the dialog "Safari cannot verify the identity of the website..."

Safari says:

Self-signed root certificate

And listed in red is "This root certificate is not trusted"

Yet, in OS X Server Admin, in the 'Certificates' section it shows my site name and under Authority it shows "Godaddy"

In Keychain access, my site certificate for my domain is listed and seems to be fine, saying:

Issued by: Go Daddy Secure Certification Authority

This certificate is valid.

I had followed all the instructions installing the certificate from Godaddy's instructions here:

http://help.godaddy.com/article/5243

Thanks

OS X Server 10.5.8-OTHER

Posted on Jun 19, 2011 10:56 AM

Reply

Answer 1

Jun 20, 2011 6:45 AM in response to John Allen2

Hi John,

You did install the certificate correctly, but you probably need the intermediate certificate from GoDaddy to complete the SSL circle. Download the right repository certificate here:

http://help.godaddy.com/article/5346?locale=en

Your server has a wide range of certificate authorities allready installed, but you need to connect your godaddy cert with an intermediate cert which connects to the correct cert authority.

After installing the repository file from godaddy you probably need to restart once to complete the circle.

Good luck!

Jeffrey

Reply

Answer 2

John Allen2 Author

Level 1

35 points

Jun 20, 2011 6:09 PM in response to Jeffrey Epping

Thanks. I added the intermediate certificate and restarted but am still having the same problem of my OS X server issuing it's self-signed certificate. I'll keep working on it.

Reply

Answer 3

John Allen2 Author

Level 1

35 points

Jun 20, 2011 6:10 PM in response to John Allen2

I wonder...maybe I need to be logged in as 'root' rather than I have been...as just 'admin' with administrator privs.

Reply

Answer 4

Jun 21, 2011 12:36 AM in response to John Allen2

Hi John,

Try to change the SSL certificate on all services like mail and web to another SSL like default. Then save the configuration, wait, and change the SSL certificate to the correct one, save the configuration and try again. Root access shouldn't make a difference in this case.

Reply

Answer 5

John Allen2 Author

Level 1

35 points

Jun 21, 2011 12:09 PM in response to Jeffrey Epping

Hi Jeffrey. One more question for you.

I tried what you said with no luck, but I wonder if this is part of my problem.

I noticed in my OS X 10.5 server log it said:

httpd: Could not reliabily determine the server's fully qualified domain name, using 127.0.0.1 for ServerName.

Could me not having DNS working correctly be my problem?

Right now if I type in Terminal: hostname

It says: candp.local

And maybe I need that to be mydomain.com

If that's the case, do you know which Server Admin type program I use to change my server from candp.local to it's real domain name?

Thanks

Reply

Answer 6

Jun 28, 2011 5:33 AM in response to John Allen2

Hi John,

In web under server admin do you have the fully qualified domain name added as a website? And does the server know locally in DNS where to find mydomain.com. It needs to resolve this address in order to accept and run the correct certificate. When your hostname is different, you still need to tell the server in DNS that it hosts the correct domain name in order for the certificate to work.

Goodluck!

Jeffrey

Reply