<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Thank you Xin!<br>
<br>
I appended gdig2.crt to my domain's certificate, and commented out
the ssl_trusted_certificate and the ssl_stapling directives, and it
did the trick.<br>
<br>
Many thanks,<br>
<br>
<br>
Igal Sapir<br>
Lucee Core Developer<br>
Lucee.org <a class="moz-txt-link-rfc2396E" href="http://lucee.org/"><http://lucee.org/></a><br>
<br>
On 4/6/2015 12:32 PM, Xin Li wrote:<br>
<blockquote type="cite">On 04/06/15 12:23, Igal @ Lucee.org wrote:<br>
> I have an issue with my SSL certificate on some mobile
devices,<br>
> e.g. Safari on iPhone and Firefox on Android. Everything
seems to<br>
> be fine with desktop browsers as well as some mobile browsers<br>
> (works fine on Chrome on Android).<br>
<br>
> According to ssllabs.com the issue is with the Certificate
Chain<br>
> and/or the Certification Path:<br>
<br>
> This server's certificate chain is incomplete. Grade capped
to B.<br>
<br>
> Certificates provided 1 (1331 bytes) Chain issues
*Incomplete*<br>
[...]<br>
> ssl_certificate C:/ssl-certificates/mydomainname.crt; ##
.crt<br>
> or .pem<br>
<br>
You need to get a copy of your intermediate certificate
authority's<br>
certificate (in your case, that Go Daddy Secure Certificate
Authority<br>
- G2 or probably <a class="moz-txt-link-freetext" href="https://certs.godaddy.com/repository/gdig2.crt">https://certs.godaddy.com/repository/gdig2.crt</a>,
check<br>
<a class="moz-txt-link-freetext" href="https://certs.godaddy.com/repository">https://certs.godaddy.com/repository</a> to make sure) and concatnate
it<br>
at the end of your mydomainname.crt.<br>
<br>
This way you are presenting a chain of certificate (your
certificate,<br>
then intermediate certificate that have signed your certificate;
you<br>
don't need to include the root certificate as it's a waste of<br>
bandwidth) to the client.<br>
<br>
Cheers,<br>
</blockquote>
<span style="white-space: pre;">><br>
> _______________________________________________<br>
> nginx mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:nginx@nginx.org">nginx@nginx.org</a><br>
> <a class="moz-txt-link-freetext" href="http://mailman.nginx.org/mailman/listinfo/nginx">http://mailman.nginx.org/mailman/listinfo/nginx</a></span><br>
<br>
<br>
</body>
</html>