SSL Guide: Renewing & Reinstalling SSL Certificate on Centminmod with GoGetSSL

Ah, OK, Qualys report is much better. "A+"

---

It does still complain about the root certificate being installed in the server ("Chain issues: contains anchor"). Am I correct in assuming that this is included in the ca-bundle file? If so, how and where would I go about removing it? There are two certificate sections in the ca-bundle file... how are you supposed to know which one is which?

According to what I have read there can be a slight performance impact in sending over the root certificate because it is redundant.

 

Thanks, yeah, that was it! Reports all clear now. Might be worth adding a note about that to the Centminmod SSL setup guide.

Maybe I just overlooked it but I didn't see anything about this mentioned anywhere else.