Overview
This article describes how to install a certificate that has a certificate chain on an Apache server.
Solutions
You can perform the following operations to install a certificate that has a certificate chain on an Apache server.
Check whether your certificate contains a certificate chain
Use a text editor to open the certificate file. If the certificate file contains three pieces of the BEGIN CERTIFICATE information, the certificate has a certificate chain.
Note: For more information about how to install a certificate that is from SSL Certificates Service on an Apache server, see Install SSL certificates on Apache servers.
Extract a certificate chain
- Create a mycert_chain.pem text file on the server.
- Use a text editor to open the certificate file, copy the second and third pieces of the BEGIN CERTIFICATE information, and then paste the information into the mycert_chain.pem text file to extract the certificate chain.
Configure an Apache server
Configure the Apache configuration file based on the following code:
...
SSLEngine On
SSLCertificateFile conf/ssl.crt/mycert.pem
SSLCertificateKeyFile conf/ssl.key/mycert.key
SSLCertificateChainFile conf/ssl.crt/mycert_chain.pem
...
Application scope
- SSL Certificates Service