How to Fix \'This Server\'s Certificate Chain is Incomplete\' Error with GoDaddy SSL Certificates?

HTTP SSL with GoDaddy's Certificate: Resolving "This Server's Certificate Chain is Incomplete"

When configuring HTTP SSL with a GoDaddy certificate, the error message "This server's certificate chain is incomplete" can indicate missing intermediate certificates in the SSL configuration. To resolve this issue, ensure that the certificate file used for HTTPS includes the server's certificate, any intermediate certificates, and the CA's certificate.

In the provided code snippet, the cert/myalcoholist.pem file should be modified to include the intermediate certificates. Additionally, consider adding a cipher suite to the TLSConfig to enhance security:

<code class="go">myTLSConfig := &tls.Config{
    CipherSuites: []uint16{
        tls.TLS_RSA_WITH_RC4_128_SHA,
        tls.TLS_ECDHE_RSA_WITH_RC4_128_SHA,
        tls.TLS_RSA_WITH_AES_128_CBC_SHA,
        tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA},
    PreferServerCipherSuites: true,
}</code>

After making these changes, the chained certificates will be complete, resulting in a proper SSL configuration. It's worth noting that some server configurations may include the root certificate in the chain, which is not an error according to RFC 2119.

The above is the detailed content of How to Fix \'This Server\'s Certificate Chain is Incomplete\' Error with GoDaddy SSL Certificates?. For more information, please follow other related articles on the PHP Chinese website!