SSL: CHAIN PROBLEMS! >> GoDaddy + Apache 2.4.23 on WINDOWS 2012 R2

Good afternoon all,

I'm totally stuck. Don't know how to follow, and what I'm doing wrong anymore. I hope you could help me with this, as I've read alot to solve the thing, but without success…

I've:

• Windows 2012 R2 server
• Apache 2.4.23 mounted on it, with MOD_JK to proxypass all requests to a Tomcat server on another machine.

I've bought an EXTENDED certificate on GoDaddy, so I can have the "green badge" on URL bar.

Now, I've downloaded the certificate from GoDaddy, and inside de ZIP, comes the propper certificate and a G2+G1+ROOT bundle one. So 2 files inside.

Placed them on a folder, and correctly specified inside the 443 VHOST as you next will see, but every SSL test I do on internet (SSLLabs, DigiCert…), it simply fails on the chaining process.

Site: cliente.merchbanc.es

https://www.ssllabs.com/ssltest/analyze.html?d=cliente.merchbanc.es&hideResults=on

https://www.sslshopper.com/ssl-checker.html#hostname=cliente.merchbanc.es

Don't know what I'm doing wrong…
I've let the HTTPD.CONF prepared as it comes (with the proper and needed modules uncommented, of course), but without anything related with VHOSTS and SSL. And then, on the extra conf file VHOST, I've added all the VHOST thing + SSL (so I'm no using the SSL conf file. It is commented. All is on the VHOSTS conf file.).

It looks like this:

##################################################################################################################
# VHOSTS HTTP

# redirect all HTTP to HTTPS (optional)
<VirtualHost *:80>

    ServerAlias *
    RewriteEngine On
    RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [redirect=301]

</VirtualHost>

##################################################################################################################
# VHOSTS HTTPS

Listen 443

# modern configuration, tweak to your needs
SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
SSLProxyProtocol        all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
SSLProxyCipherSuite     ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
SSLHonorCipherOrder     on
SSLCompression          off
SSLSessionTickets       off

SSLPassPhraseDialog     builtin

SSLSessionCache        "shmcb:c:/lala/lele/ssl_scache(512000)"
SSLSessionCacheTimeout  300

# OCSP Stapling, only in httpd 2.3.3 and later
SSLUseStapling                      on
SSLStaplingResponderTimeout         5
SSLStaplingReturnResponderErrors    off
SSLStaplingCache                    "shmcb:c:/lala/lele/ocsp(128000)"

<VirtualHost *:443>

    SSLEngine on
    SSLCertificateFile "blah/blahblah/cliente.merchbanc.es/123412341234.crt"
    SSLCertificateKeyFile "blah/blahblah/cliente.merchbanc.es/123412341324.key"
    #SSLCertificateChainFile "blah/blahblah/cliente.merchbanc.es/gd_bundle-g2-g1.crt"
    SSLCACertificatePath "blah/blahblah/cliente.merchbanc.es/GoDaddy_G2"

    # Uncomment the following directive when using client certificate authentication
    #SSLCACertificateFile    /path/to/ca_certs_for_client_authentication

    # HSTS (mod_headers is required) (15768000 seconds = 6 months)
    Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"

    ...
    ... follows with the ProxyPassing part, but not the case now.
    ...

</VirtualHost>

Following the GoDaddy installation instructions webpage, I've changed the SSLCertificateChainFile directive, to the SSLCACertificatePath directive, as I'm using Apache on 2.4.23 version. But it does not solve anything.

After that, I've decided to download ALL the G2 certificates from here:
https://certs.godaddy.com/repository

and put'em all inside the folder specified on the SSLCACertificatePath path: "blah/blahblah/cliente.merchbanc.es/GoDaddy_G2". But doesn't works too.

And finally, as I'm in Windows, I've decided to go certificate, after certificate, double-clicking em, and installing on the server, having them now inside the "Internet Options > Content > Certificates", all spread on the various existing tabs. And as common, doesn't makes a change at all.

Every time of course, restarting Apache and even after installing on Windows the certificates, restarting the server itself too.

So, what now?
Hope you can help me, please.

Thanks and kind regards.

Mark.