Callback URL Cert problem

Do you have any idea how to restructure it using Apache?  I've installed these certs before in apache, but never even considered the structure like this. ; Is there any documention on that, or what is the appropriate keywords to google for?

 

Thanks.

 

On 10/4/07, GoogleCheckoutDevProPeng < Checkout-Dev-Pro+Penggoogle.com">Checkout-Dev-Pro+Penggoogle.com> wrote:

Hi

It looks like you have an unnecessary intermediate certificate or
reversed intermediate and root. ; Your current hierarchy is:

go daddy class 2 ca -> go daddy secure cert
valicert -> go daddy class 2
go daddy secure cert -> domain

You could should restructure it to the following

go daddy class 2 ca -> go daddy secure cert
go daddy secure cert -> domain

-Peng

On Oct 4, 9:57 am, ricozinn < ricoz...gmail.com">ricoz...gmail.com> wrote:
>; I'm getting this error from Google:
&gt; //MESSAGE FROM GOOGLE
&gt; We encountered an error trying to access your server athttps://www.chooserenewables.com/xcart/payment/ps_gcheckout.php-- the
> error we got is: sun.security.validator.ValidatorException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException:
> basic constraints check failed: pathLenConstraint violated - this cert
> must be the last cert in the certification path
> //END MESSAGE FROM GOOGLE
>;
> Below is my output for testing the cert and it all looks correct to me
> with the root cert->intermediary cert->website cert. ; Any idea what is
> going on?
>
&gt; thanks...
>
> #PROMPT: openssl s_client - connectwww.chooserenewables.com:443-
>; showcerts < /dev/null
> CONNECTED(00000003)
&gt; depth=2 /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2
> Certification Authority
> verify error:num=20:unable to get local issuer certificate
> verify return:0
&gt; ---
> Certificate chain
>  ;0 s:/O=www.chooserenewables.com/OU=DomainControl Validated/
> CN= www.chooserenewables.com
>  ; &nbsp;i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://
> certificates.godaddy.com/repository/CN=Go Daddy Secure Certification
> Authority/serialNumber=07969287
> -----BEGIN CERTIFICATE-----
> MIIFEjCCA/qgAwIBAgIDQAnvMA0GCSqGSIb3DQEBBQUAMIHKMQswCQYDVQQGEwJV
> ...more cert lines...
&gt; 7i+WJziRDDuLLY7R6KZQJCNxXXycd8/DyNuyXLOTivWcqz52WBb9LE2falBxEkjp
> qpB3r52N
&gt; -----END CERTIFICATE-----
>  ;1 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2
> Certification Authority
> &nbsp;  i:/L=ValiCert Validation Network/O=ValiCert, Inc./OU=ValiCert Class
&gt; 2 Policy Validation Authority/CN=http://www.valicert.com//
> emailAddress= i...valicert.com">i...valicert.com
> -----BEGIN CERTIFICATE-----
&gt; MIIE+zCCBGSgAwIBAgICAQ0wDQYJKoZIhvcNAQEFBQAwgbsxJDAiBgNVBAcTG1Zh
> ...more cert lines...
&gt; SxOaFIqII6hR8INMqzW/Rn453HWkrugp++85j09VZw==
> -----END CERTIFICATE-----
>  ;2 s:/C=US/ST=Arizona/L=Scottsdale/O= GoDaddy.com, Inc./OU=http://
> certificates.godaddy.com/repository/CN=Go Daddy Secure Certification
> Authority/serialNumber=07969287
> &nbsp;  i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2
> Certification Authority
> -----BEGIN CERTIFICATE-----
> MIIE3jCCA8agAwIBAgICAwEwDQYJKoZIhvcNAQEFBQAwYzELMAkGA1UEBhMCVVMx
> ...more cert lines...
&gt; qDTMBqLdElrRhjZkAzVvb3du6/KFUJheqwNTrZEjYx8WnM25sgVjOuH0aBsXBTWV
> U+4=
> -----END CERTIFICATE-----
> ---
> Server certificate
> subject=/O=www.chooserenewables.com/OU=DomainControl Validated/
> CN=www.chooserenewables.com
> issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://
> certificates.godaddy.com/repository/CN=Go Daddy Secure Certification
> Authority/serialNumber=07969287
> ---
> No client certificate CA names sent
> ---
> SSL handshake has read 4401 bytes and written 340 bytes
&gt; ---
> New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
&gt; Server public key is 1024 bit
> Compression: NONE
> Expansion: NONE
> SSL-Session:
>&nbsp; &nbsp;  Protocol&nbsp; : TLSv1
>  ; &nbsp; Cipher&nbsp; &nbsp; : DHE-RSA-AES256-SHA
> &nbsp;   Session-ID:
> B0D99397937200B11A0E872DF8B216842DA07FC26D4F657576AB41591F7B1A18
> &nbsp;   Session-ID-ctx:
>&nbsp;   ; Master-Key:
> BBF4B6677153E9522E3A8F0F8FBDEF0989D9C0031368A239046B0894977626863AFCE83032AA5D44904CE75A28F0A7F8
>   ;  Key-Arg&nbsp;  : None
>&nbsp;   ; Krb5 Principal: None
>&nbsp;   ; Start Time: 1191516011
>   ;  Timeout&nbsp;  : 300 (sec)
>  ; &nbsp; Verify return code: 20 (unable to get local issuer certificate)
> ---
> DONE

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "API Integration Basics&quot; group.
To post to this group, send email to google-checkout-api-integrationgooglegroups.com
To unsubscribe from this group, send email to google-checkout-api-integration-unsubscribegooglegroups.com
For more options, visit this group at http://groups.google.com/group/google-checkout-api-integration?hl=en
-~----------~----~----~----~------~----~------~--~---