Apache still using default SSL certificate for Virtual Host even after a real one has been installed
I am receiving 'Connection is Untrusted' errors when accessing my site from a browser over SSL. I can see from the details it is using the default self-signed certificate from Apache, and not the real CA-signed certificate I have installed.
In the virtual host config for the site I have:
SSLEngine on
SSLCertificateFile /etc/ssl/backup.domainname.com.crt
SSLCertificateKeyFile /etc/ssl/backup.domainname.com.key
...where domainname is the actual domain of the site. I have restarted Apache and it came back up ok.
What would be causing Apache to try and use the default self-signed certificate created when the OS was installed, rather than this real certificate specified in the virtual host config? Does it matter which directory the .crt and .key files are stored in?
Is it the same error or are you seeing client negotiation warnings due to a missing Intermediate cert and associated SSLCertificateChainFile
entry?
Another possibility is you are using a default apache implementation that is including the old cert directives somewhere higher up in your httpd.conf or in an included conf file.