{"action":"created","issue":{"url":"https://api.github.com/repos/Yannik/qnap-letsencrypt/issues/1","repository_url":"https://api.github.com/repos/Yannik/qnap-letsencrypt","labels_url":"https://api.github.com/repos/Yannik/qnap-letsencrypt/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/Yannik/qnap-letsencrypt/issues/1/comments","events_url":"https://api.github.com/repos/Yannik/qnap-letsencrypt/issues/1/events","html_url":"https://github.com/Yannik/qnap-letsencrypt/issues/1","id":139566239,"number":1,"title":"Server's certificate chain is incomplete","user":{"login":"KurtTheBerner","id":16208159,"avatar_url":"https://avatars.githubusercontent.com/u/16208159?v=3","gravatar_id":"","url":"https://api.github.com/users/KurtTheBerner","html_url":"https://github.com/KurtTheBerner","followers_url":"https://api.github.com/users/KurtTheBerner/followers","following_url":"https://api.github.com/users/KurtTheBerner/following{/other_user}","gists_url":"https://api.github.com/users/KurtTheBerner/gists{/gist_id}","starred_url":"https://api.github.com/users/KurtTheBerner/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/KurtTheBerner/subscriptions","organizations_url":"https://api.github.com/users/KurtTheBerner/orgs","repos_url":"https://api.github.com/users/KurtTheBerner/repos","events_url":"https://api.github.com/users/KurtTheBerner/events{/privacy}","received_events_url":"https://api.github.com/users/KurtTheBerner/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-03-09T12:38:30Z","updated_at":"2016-03-09T13:37:43Z","closed_at":null,"body":"First I would like to thank you for writing these exact instructions for installing a letsencrypt certificate. \r\nI did everything step by step and it worked, but unfortunately on some clients I still get a certificate Error. I then checked the site using the service on https://www.ssllabs.com/ssltest/ and I got the overall Rating B with the warning Message \"This server's certificate chain is incomplete.\"\r\nWhat does this mean?\r\n\r\nMy questions:\r\n- Do I have to modify the file /etc/config/apache/extra/httpd-ssl-vhosts-user.conf and add Entries for SSLCertificateKeyFile and SSLCertificateChainFile?\r\n- Do I have to generate /etc/ssl/certs as it's stated in your FAQ Section? What about a Reboot, all is lost in this folder.\r\n\r\nThanks for your help\r\n"},"comment":{"url":"https://api.github.com/repos/Yannik/qnap-letsencrypt/issues/comments/194298959","html_url":"https://github.com/Yannik/qnap-letsencrypt/issues/1#issuecomment-194298959","issue_url":"https://api.github.com/repos/Yannik/qnap-letsencrypt/issues/1","id":194298959,"user":{"login":"Yannik","id":801996,"avatar_url":"https://avatars.githubusercontent.com/u/801996?v=3","gravatar_id":"","url":"https://api.github.com/users/Yannik","html_url":"https://github.com/Yannik","followers_url":"https://api.github.com/users/Yannik/followers","following_url":"https://api.github.com/users/Yannik/following{/other_user}","gists_url":"https://api.github.com/users/Yannik/gists{/gist_id}","starred_url":"https://api.github.com/users/Yannik/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Yannik/subscriptions","organizations_url":"https://api.github.com/users/Yannik/orgs","repos_url":"https://api.github.com/users/Yannik/repos","events_url":"https://api.github.com/users/Yannik/events{/privacy}","received_events_url":"https://api.github.com/users/Yannik/received_events","type":"User","site_admin":false},"created_at":"2016-03-09T13:37:42Z","updated_at":"2016-03-09T13:37:42Z","body":"Hi,\r\n\r\nplease post the detailed output of the section \"Certification Path\" of the ssltest. (This is regarding the certificate chain)\r\n>Do I have to modify the file /etc/config/apache/extra/httpd-ssl-vhosts-user.conf and add Entries for SSLCertificateKeyFile and SSLCertificateChainFile?\r\n\r\nNo, as apache just serves http and the SSL layer is done by stunnel. `/etc/stunnel/stunnel.conf` is the key configuration file. Post your `ciphers` line and we will see why you only get a B rating. \r\n\r\n> Do I have to generate /etc/ssl/certs as it's stated in your FAQ Section? What about a Reboot, all is lost in this folder.\r\n\r\nNo, you don't have to. As you noted, it is pretty useless as it's gone after a reboot. It is not needed at all but I just wrote it down because that's what I did first (when I didn't know it was gone after a reboot).\r\n\r\n"}}