I setup an internal Root CA with another Intermediate CA, which will issue and sign the certificates for other internal servers.
When I did the "openssl s_client -connect :443" it shows the error message that "Self Signed Certificate is in the Certificate of Chain".
I believe this could be due to the Root CA is self signed, as Root CA self signed its own issued certificate. And the certificate of Chain contains the concatenate of the Root and Intermediate CA certificate.
If I remove the Root CA certificate from the certificate chain file, it shows another error "unable to get local issuer certificate".
I did a "openssl verify -CAfile ", it shows ok.
I tested with a client PC to access the server with the cert installed, but only able to connect using normal port 80 but not the SSL/TLS port 443 (The site can't be reached).
I am not sure what did I miss out? and how do I troublesome? Any advice?