whatsmychaincert | Frontend for whatsmychaincert.com
kandi X-RAY | whatsmychaincert Summary
kandi X-RAY | whatsmychaincert Summary
This repository contains the source code for the frontend of a website that helps you test and configure SSL chain certificates. whatsmychaincert.com tests if your server is serving the correct certificate chain, tells you what chain you should be serving, and helps you configure your server to serve it. Head on over to the site for more information. index.html is compiled from index.xml by running make.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
- Creates a list of results of test results .
whatsmychaincert Key Features
whatsmychaincert Examples and Code Snippets
Community Discussions
Trending Discussions on whatsmychaincert
QUESTION
My site has a Let's Encrypt cert that is installed using certbot and is perfect for HTTPS connections (port 443). Works great.
I also have a node server running and I use socket.io for websocket connections, which requires its own certificate. So I give it the Let's Encrypt certificate, and that seems to work for me, though I am not 100% confident it works for all my site's users.
What has me concerned is this: when I check my cert at https://whatsmychaincert.com/ and specifically add port 2998 with my domain, I'm told my certificate chain is "misconfigured." (When I use that web site to just check my domain with no port, or specifically adding the normal SSL port :443
to the domain name, it says the chain is perfect.)
I googled quite a bit but can't find a clear answer: does Let's Encrypt support the secure web socket protocol (wss://
) that runs on port 2998? (And if not, how can I find an SSL cert that will work?)
ANSWER
Answered 2020-Feb-10 at 19:32Asking if Let's Encrypt supports WebSockets or not is simply invalid. They're just an issuer. You receive a perfectly valid X.509 certificate, you can use it anywhere you want where such certificate is applicable. You can get one elsewhere too. The port under which a service is running doesn't matter as well.
Without knowing your SSL configuration we can't help you to debug this.
QUESTION
Basically facebook scraper(https://developers.facebook.com/tools/debug/og/object/) tells that:
...ANSWER
Answered 2020-Jan-07 at 15:33Unlike browsers PHP Curl doesn't reconstruct the certificate tree from other sources. So if your cert tree is incomplete, CURL cannot verify your site certificate.
Your VirtualHost configuration should have following:
SSLCertificateFile
- your site certificateSSLCertificateKeyFile
- key for the CertificateFileSSLCertificateChainFile
- file containing all intermediate certificates from leaf to root (so curl can connect your certificate to the one in/etc/ssl/certs/cacert.pem
)
Since 2.4.8 you can put all certificates from leaf to root into SSLCertificateFile (https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcertificatefile)
You can test your SSL configuration using https://www.ssllabs.com/ssltest/index.html which also reports incomplete certificate tree.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install whatsmychaincert
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page