Trouble installing SSL Certificate on Apache
        Posted  
        
            by jahufar
        on Server Fault
        
        See other posts from Server Fault
        
            or by jahufar
        
        
        
        Published on 2010-01-25T14:30:53Z
        Indexed on 
            2010/03/28
            15:03 UTC
        
        
        Read the original article
        Hit count: 475
        
We have a dedicated server with GoDaddy running Plesk that requires SSL.
I've generated the certificate files and I created a vhost_ssl.conf (since I can't edit the default plesk apache configuration http.include, vhost_ssl.conf gets Included to httpd.include) that tells apache where to find the certificate files:
SSLCertificateFile /usr/local/psa/var/certificates/domain.com.crt
SSLCertificateKeyFile /usr/local/psa/var/certificates/domain.com.key
SSLCertificateChainFile /usr/local/psa/var/certificates/sub.class1.server.ca.pem
When I stop/start apache, it refuses to start up. The error_log does not have anything on it either (which is strange).
Then I opened up httpd.include and found this bit:
<VirtualHost 208.xxx.xxx.xxx:443>
    ServerName   domain.com:443
    ServerAlias  www.domain.com
    UseCanonicalName Off
    SSLEngine on
    SSLVerifyClient none
    SSLCertificateFile /usr/local/psa/var/certificates/certagC9054
    Include /var/www/vhosts/domain.com/conf/vhost_ssl.conf
Then I commented out
   SSLCertificateFile /usr/local/psa/var/certificates/certagC9054
(which is plesk's SSL certificate) and restarted apache and it worked perfectly fine.
It seems that Apache does not like multiple SSLCertificateFile within the same VirtualHost directive?
As anyone who worked with plesk knows, I can't just remove SSLCertificateFile directive in httpd.include as plesk will overwrite my changes when someone uses it - which is why it's in vhost_ssl.conf.
So I'm stuck and this is beyond my meager admin skills. Would appreciate someone who knows what (s)he's doing to tell me whats going on.
Thanks in advance.
© Server Fault or respective owner