"R" == Rolandas rolnas@gmail.com writes:
Hi Rolandas,
thanks for reporting. Can you please confirm that it works flawlessly now? There was an active left-over config option SSLCertificateChainFile pointing to an old certificate chain file.
Best,
Roland
R> Hi, On new installation of Firefox we cannot connect to R> https://www.qlustar.com. The cause is missing intermediate R> certificate in server certificate chain response. By using
R> openssl s_client -connect www.qlustar.com:443
R> we can see very strange chain:
R> Certificate chain R> 0 s:CN = www.qlustar.com R> i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 R> 1 s:C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA R> Limited, CN = COMODO RSA Domain Validation Secure Server CA R> i:C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA R> Limited, CN = COMODO RSA Certification Authority R> 2 s:C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA R> Limited, CN = COMODO RSA Certification Authority R> i:C = SE, O = AddTrust AB, OU = AddTrust External TTP R> Network, CN = R> AddTrust External CA Root
R> Let's Encrypt have different intermediate certificate.
R> Regards, Rolandas
R> P.S. It also caused problems with wget/curl to download files R> from your site.