title: SSL Certificate not being loaded
body: <p>I have this in the config page</p>
  
  <pre><code>  &lt;IfModule ssl_module&gt;
        SSLEngine On
        SSLCertificateFile /srv/website.com/config/ssl/website_com.crt
        SSLCertificateKeyFile /srv/website.com/config/ssl/server.key
        SSLCertificateChainFile "/srv/website.com/config/ssl/website_com.ca-bundle
      &lt;/IfModule&gt;
  </code></pre>
  
  <p>I'm running Debian 9 with Apache mod-ssl.</p>
  
  <p>The config page is apache2.conf in there I have this Include ports.conf</p>
  
  <pre><code>Listen 80
  
  &lt;IfModule ssl_module&gt;
          Listen 443
  &lt;/IfModule&gt;
  
  &lt;IfModule mod_gnutls.c&gt;
          Listen 443
  &lt;/IfModule&gt;
  </code></pre>
  
  <p>Uploaded the docs in SSL from Comodo which was a positiveSSL so I had to concatenate the .crt files like this:</p>
  
  <pre><code>cat USERTrustRSADomainValidationSecureServerCA.crt USERTrustRSAAddTrustCA.crt AddTrustExternalCARoot.crt &gt;&gt; website_com.cabundle
  </code></pre>
  
  <p>Did a configtest where syntax is ok. Gracefully restarted apache the website.com is still up and working but if I go to <a href="https://website.com" rel="nofollow noreferrer">https://website.com</a> it says safari can’t access the page.</p>
  
  <p>I’ve tested the connection via <a href="https://www.ssllabs.com/ssltest/analyze.html?d=website.com" rel="nofollow noreferrer">https://www.ssllabs.com/ssltest/analyze.html?d=website.com</a> which said no secure protocols…</p>
  
  <p>Then checked for errors via </p>
  
  <pre><code>openssl s_client -CApath /etc/ssl/certs/ -connect example.com:443
  
      CONNECTED(00000003)
      139742262367488:error:1408F10B:SSL routines:ssl3_get_record:wrong    
  version number:../ssl/record/ssl3_record.c:252:
      ---
      no peer certificate available
      ---
      No client certificate CA names sent
      ---
      SSL handshake has read 5 bytes and written 176 bytes
      Verification: OK
      ---
      New, (NONE), Cipher is (NONE)
      Secure Renegotiation IS NOT supported
      Compression: NONE
      Expansion: NONE
      No ALPN negotiated
      SSL-Session:
      Protocol  : TLSv1.2
      Cipher    : 0000
      Session-ID: 
      Session-ID-ctx: 
      Master-Key: 
      PSK identity: None
      PSK identity hint: None
      SRP username: None
      Start Time: 1509040891
      Timeout   : 7200 (sec)
      Verify return code: 0 (ok)
      Extended master secret: no
  </code></pre>
  
  <p>I understand that the Client Certificate CA names aren't getting sent. I've read this in the default-ssl.conf file</p>
  
  <pre><code>#   Certificate Authority (CA):
  #   Set the CA certificate verification path where to find CA
  #   certificates for client authentication or alternatively one
  #   huge file containing all of them (file must be PEM encoded)
  #   Note: Inside SSLCACertificatePath you need hash symlinks
  #   to point to the certificate files. Use the provided
  #   Makefile to update the hash symlinks after changes.
  #SSLCACertificatePath /etc/ssl/certs/
  #SSLCACertificateFile /etc/apache2/ssl.crt/ca-bundle.crt
  </code></pre>
  
  <p>But is this the same file I'm referencing in the website.conf file above?</p>
  
  <p>I've spoken to my hosting support and registrar support and none of them have a clue how to set this up manually on the terminal...</p>
  
  <p>Also how do I make it default to the https:// connection?</p>
  
  <p>Any ideas would be greatly appreciated.</p>
  
  <p>Thanks</p>