SSL intermediate.crt root.pem missing?

Hi
I just get a Comodo ssl certificate and i am following this tutorial to set it up:

Code:

http://centminmod.com/nginx_configure_https_ssl_spdy.html

I am on the creation of ssl-unified.crt command:

Code:

cat yourdomain.crt intermediate.crt root.pem > ssl-unified.crt

But i didn't get any intermediate.crt root.pem files to upload at

Code:

/usr/local/nginx/conf/ssl/domaincom/ 

and use with the above command

---

I got only:

Code:

AddTrustExternalCARoot.crt
COMODORSAAddTrustCA.crt
COMODORSADomainValidationSecureServerCA.crt
mydomain_com.crt

 

I don't know if they should provide those two files intermediate.crt and root.pem or maybe they use another way to add them on Nginx...

But i want to follow the centminmod tutorial and in general the way that George use it.....

 

From knowledge base:
The most popular problem is that SSL is not working on mobile devices or in some browsers, its happening as you miss to install Intermediate-CA files
When SSL is issued, you receive 3 files that you need to use, you can also download them from Client area in ZIP file

• -AddTrustExternalCARoot.crt (CA file that makes working SSL in all browsers and mobile devices)
• -PositiveSSLCA2.crt or COMODOHigh-AssuranceSecureServerCA.crt (Main CA file)
• -www_yourdomainname.crt (Your SSL)

1. First, you need to combine two CA files in one, its very easy, all you need to do is to open both files (AddTrustExternalCARoot.crt + PositiveSSLCA2.crt/COMODOHigh-AssuranceSecureServerCA.crt) in any Text editor like Notepad, and copy/paste the codes one by one in one file and save it. Now you will have 1 file with SSL CA, we need that, as only few system allow to install 2 separate files, most of them allow just one file

Now how can i adjust the commands?

first:
cat yourdomain.crt intermediate.crt root.pem > ssl-unified.crt

second:
cat intermediate.crt root.pem > ssl-trusted.crt

Thanks !!!

 

Using two >> ? or one > as it is in the tutorial?

 

Also in the tutorial on the second command is merging two files and not three as you recommend me ...
?

 

Great i got it working

But on spdycheck.org i have only one warning as i miss something

Not Using Strict-Transport-Security

How can i fix this?

 

I have already this in my config and restart Nginx but it seems not working:

Code:

add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";

And one last problem :

The:

Code:

https://www.mydomain.com

is not redirecting to:

Code:

https://mydomain.com

as i don't want to use the www

 

Yes i am testing html So if i use php it will be fine?


It is not redirecting

The top of my mydomain.com.conf:

Code:

# redirect from non-www to www
# uncomment, save file and restart Nginx to enable
#server {
#  listen  80;
#  server_name mydomain.com;
#  return 301 $scheme://www.mydomain.com$request_uri;
#  }

server {
  server_name mydomain.com www.mydomain.com;
  return 301 https://$server_name$request_uri;

}

# https SSL SPDY vhost
server {
  listen 443 ssl spdy;
  server_name mydomain.com;

  ssl_certificate  /usr/local/nginx/conf/ssl/domaincom/ssl-unified.crt;
  ssl_certificate_key  /usr/local/nginx/conf/ssl/domaincom/ihostexperts_com.key;

 

Confused

Yes i don't want www but when i type the:

Code:

www.mydomain.com 

using the above config it is not redirect to the non www .....

 

Maybe something wrong in my domain records?



This is what i try:

Code:

www.mydomain.com  redirecting to --> https://www.mydomain.com/  and i am getting Unable to connect
http://www.mydomain.com  redirecting to --> https://www.mydomain.com/  and i am getting Unable to connect  
https://www.mydomain.com  --->Unable to connect