I`m using apache 2.4.10 on debian 8 and after try to install purchased certificate - crt and ca file is in same fille... Here: https://git.ispconfig.org/ispconfig/ispconfig3/issues/4359 - is closed with status fixed but problem exist and in 3.1.3. I trying to install StartSSL Class 1 SSL for domain domain.com: ISPConfig -> Web -> domain.com -> enable checkbox SSL in Domain tab After that going to SSL tab - Paste key, crt and CA and after operation is done crt and ca is in same file and in vhost missing directive: SSLCACertificateFile - only: SSLCertificateFile /var/www/clients/client1/web20/ssl/b*d*s.eu.crt SSLCertificateKeyFile /var/www/clients/client1/web20/ssl/b*d*s.eu.key
So everything is working perfectly and as it should be for that apache version. Apache 2.4.10 and newer expects the Bundle certificate inside the .crt file, there is no separate SSL bundle file and directive required anymore in recent apache versions.
Nice. Thanks. The problem is in Firefox and Chrome are removed StartSSL CA Authorities... https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/
Startssl should not be used anymore as no major browser accepts them as valid certs, Apple removed it as well. If you are seeking for a free SSL cert, use Letsencrypt instead.
