Install Entrust ssl chain certificate apache 2 – Red Hat Configuration

In order to install successfully a chain certificate (in my environment it was issued by Entrust) on a Red hat you should edit the following entries in the /etc/httpd/conf.d/ssl.conf apache file.

#Server Certificate 
SSLCertificateFile /path/to/public.pem

#Server Private Key
SSLCertificateKeyFile /path/to/private.pem

#Server Certificate Chain
SSLCertificateChainFile /path/to/chain.crt

#Certificate Authority
SSLCertificateFile /path/to/root-ca.pem

After the changes you should restart apache so that the changes take place. Keep in mind that if the certificate is password protected, you will be asked for an ssl passphrase that you should provide in order for the restart to be completed.

service httpd restart

You can ensure that the certificate is installed successfully by using the following command:

openssl s_client -connect HOSTNAME:443

Your response should look like:

Verify return code: 0 (ok)