How to Configure SSL on Apache 2.4

Solution 1:

Your config looks fine, so you should check that those files are what you think they are.

  • aXXXXXX.crt should be a certificate file.

    • Check that the first line is -----BEGIN CERTIFICATE-----.
    • Run openssl x509 -in aXXXXXX.crt -noout -text and check that the output looks right for your server. Look especially at the "Subject" and "x509v3 Subject Alternative Name" fields.
  • aXXXXXX.pem should be a private key file.

    • Check that the first line is -----BEGIN PRIVATE KEY-----.
    • Run openssl rsa -in aXXXXXX.pem -noout -text. The first line should say "RSA Private-Key".
  • gd_bundle-g2-g1.crt should be a certificate chain file, which is just a list of intermediate certificates.

    • Check that there are one or more certificates in it. Each certificate begins with -----BEGIN CERTIFICATE----- and ends with -----END CERTIFICATE-----.