1

I have bought new WILDCARD certificates (*.mydomain.com) for my servers.

I was able to install successfully on one server. So, I know the files are correct and I was able to verify their validity.

My servers are running Apache2 on Ubuntu 10 and 12-

I have stored away the old certificates and install the new ones in a new folder, then edited the corresponding configuration file to point to the new certificates.

Restarted apache:

$ apache2ctl restart

And browsed to the page that should be secured.

I am still getting that my certificates have expired. I have even rebooted the machine to make sure. So, I am guessing that either my certificates are cached on the servers side or the client side ...

As this is new to me, any help is appreciated.

Here the log I get after a reboot

[Mon Dec 09 15:05:39 2013] [info] Loading certificate & private key of SSL-aware server
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_pphrase.c(470): unencrypted RSA private key - pass phrase not required
[Mon Dec 09 15:05:39 2013] [info] Configuring server for SSL protocol
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(465): Creating new SSL context (protocols: SSLv3, TLSv1)
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(613): Configuring client authentication
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(1208): CA certificate: /C=US/O=Register.com/CN=Register.com CA SSL Services (OV)
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(1208): CA certificate: /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Hardware
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(1208): CA certificate: /C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(676): Configuring permitted SSL ciphers [HIGH:MEDIUM:!ADH:!MD5]
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(420): Configuring TLS extension handling
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(807): Configuring RSA server certificate
[Mon Dec 09 15:05:39 2013] [debug] ssl_engine_init.c(846): Configuring RSA server private key
[Mon Dec 09 15:05:39 2013] [debug] proxy_util.c(1818): proxy: grabbed scoreboard slot 0 in child 7618 for worker http://localhost/
[Mon Dec 09 15:05:39 2013] [debug] proxy_util.c(1934): proxy: initialized single connection worker 0 in child 7618 for (localhost)

closed as off-topic by Adi, TildalWave, user10211, NULLZ, Xander Dec 10 '13 at 13:56

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

1

I found out that I had also node.js instance running on the server.

That node HTTPS server was also using the certificates but since I was only restarting Apache, the new certificates where not taken into account.

Only after a reboot I noticed that there was that node.js server and found where to configure it properly to use the new certificates.

There was no cache whatsoever to worry about.

  • You might want to accept your own answer, so that the question doesn't remain in "open" status. – e-sushi Dec 9 '13 at 23:44

Not the answer you're looking for? Browse other questions tagged or ask your own question.