Entrust Certificate Services Support Knowledge Base

Audience: Administrator
Last Modified: 2007-02-21 14:14:31.0

TN 7066 - Why Do I receive the error Failed to configure CA certificate chain ?

Problem:

[Fri Feb 02 14:27:53 2007] [error] Failed to configure CA certificate chain!

[Mon Feb 05 14:47:04 2007] [error] SSL Library Error: 185090057 error:0B084009:x509 certificate routines:X509_load_cert_crl_file:PEM lib

Solution:

The chain or chains are not formatted correctly.  Please import your chain.crt file into Internet Explorer and export it as a Base64 encoded file.

You can then save it and make sure your Apache config line for SSLCertificateChainFile points to the right file.

Internet Explorer steps:

1. Copy the chain(s) and save it into a text file with the complete "-----BEGIN CERTIFICATE-----", "-----END CERTIFICATE-----" lines, and no other characters included.  For EV use, you would copy each certificate to its own separate file called chain1.crt and chain2.crt and perfom these steps on each file.

2. Import the certificate file into Internet Explorer:

Tools > Internet Options > Content > Certificates > Import > Select certificate file.

The certificate should then be stored in your 'Other People' certificate store (you can view it under 'Other People').

3. Select the certificate > Export > select "Base 64 encoded x509" > Choose a file name and save.

4. Refer to EV Chain instructions for your server if you are specifically using the chain(s) for your EV SSL certificate.

 

Affected Products:

• Entrust Certificate Services Certificate Administrator EV SSL - 1 Year Version Not Applicable Language Not Applicable Windows
• Entrust Certificate Services Certificate Administrator EV SSL - 2 Year Version Not Applicable Language Not Applicable Windows
• Entrust Certificate Services EV SSL - 1 Year Version Not Applicable English Windows
• Entrust Certificate Services EV SSL - 2 Year Version Not Applicable English Windows