A few computers, but not most, are rejecting the SSL certificate from my webserver. The problem seems to be that some computers are rejecting the CA certs. The problem seems to be manifesting on Mac OS X 10.6 when it is not fully updated.
According to http://www.sslshopper.com/index.php?q=ssl-checker.html#hostname=beta.asana.com -- there's no problem.
According to http://certlogik.com/sslchecker/, there's no intermediate certs being sent down.
My cert is from Starfield Technologies, and I'm using sf_bundle.crt
from here: certs.godaddy.com/anonymous/repository.seam
I'm handling SSL on my server via stunnel with the following stunnel.conf
:
cert = $CODEZ/admin/production/proxy/asana.pem
CAfile = $CODEZ/admin/production/proxy/sf_bundle.crt
pid =
client = no
[<forwarded port>]
accept = 443
connect = 8443
Any ideas what I could be doing wrong?