Which certificate chain file to include with self-signed certificate?
I want some pages that require passwords on my website to be secure
just a note. As a best practice, entire web site should be protected with SSL. Here is a blog post that explains why SSL on authentication pages is not sufficient: Securing your ASP.NET MVC 4 App and the new AllowAnonymous Attribute (although it is related to ASP MVC, other platforms are affected too).
but I can't seem to figure out what is the SSLCertificateChainFile
I think, it is a PKCS#7 container that contains intermediate CA certificates. With self-signed certificates, there are no other certificates, therefore (sorry, I'm not a Apache expert) this file may be:
- Self-signed certificate itself (only public part)
- Can be deleted (this file doesn't make any sense with self-signed SSL certificates)
- Empty (less likely, Apache may complain about wrong file format).
I would go with step 1, pass the same certificate to SSLCertificateFile
and SSLCertificateChainFile
parameters.
If you are using a self-signed certificate, there are is no certificate authority or other certificates in certificate chain. Therefore just do not include SSLCertificateChainFile
in <VirtualHost>
section.