Nginx – Some users receive untrusted SSL certificate warnings

nginxssl-certificate

I've been getting reports of users visiting our site getting "this certificate is not trusted" errors when visiting our site via https. I don't seem to ever have any problems, but two separate people on my team have gotten this error randomly when they're on a different wifi network other than the one at our office. They don't have the same problem at the office.

I read up on intermediate certificates but this seems to be just a browser thing, not a network related issue.

I have an SSL cert from GoDaddy, it's on a Rails app running on nginx + unicorn.

Does anyone have any other ideas why this might happen? I'm pretty stumped.

I do get the below (redacted) when running openssl s_client -connect $hostname:443.


CONNECTED(00000003)
depth=2 C = US, O = "The Go Daddy Group, Inc.", OU = Go Daddy Class 2 Certification Authority
verify error:num=19:self signed certificate in certificate chain
verify return:0

Best Answer

This issue is related to adding the entire certificate chain -- for me, I needed to concatenate a gd_bundle.crt file into my distributed certificate and re-upload it to the server. I was able to verify that it worked by using an online SSL checker.

Related Topic