<div><span style="font-family:UICTFontTextStyleBody;font-size:17px">Hi Ali,</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px"></span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">This what’s included in the Zip:</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px"></span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">AddTrustExternalCARoot.crt</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">COMODORSAAddTrustCA.crt</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">COMODORSADomainValidationSecureServerCA.crt</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">STAR_company_com.crt</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">company.key</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px"></span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">> 1. your certificate (foo_com.crt)</span></div><div><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">So STAR_company_com.crt is my certificate.</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px"></span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">> 2. a set of intermediary certificates (intermediate1.crt, intermediate2.crt)</span></div><div><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">How do i know which one is the latest ... to build the intermediary certificate chain in this case?</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">They're not numbered.</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px"></span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">> 3. the root certificate (root.crt)</span></div><div><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">What this one is useful for?</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px"></span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">Thank you.</span><br style="font-family:UICTFontTextStyleBody;font-size:17px"><span style="font-family:UICTFontTextStyleBody;font-size:17px">/Frank</span></div><div><font face="UICTFontTextStyleBody"><span style="font-size:17px"><br></span></font><div class="gmail_quote"><div>Le ven. 30 déc. 2016 à 13:03, Ali Sabil <<a href="mailto:ali.sabil@gmail.com">ali.sabil@gmail.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_msg">Hi Frank,<div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">I don't remember the exact details, but you should have received a zip file with a set of certificates. This zip file should contain</div><div class="gmail_msg">1. your certificate (foo_com.crt)</div><div class="gmail_msg">2. a set of intermediary certificates (intermediate1.crt, intermediate2.crt)</div><div class="gmail_msg">3. the root certificate (root.crt)</div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">You will need to concatenate all the intermediaries starting from the last one into what's called a intermediary certificate chain:</div><div class="gmail_msg">    <font face="monospace" class="gmail_msg">cat intermediate2.crt intermediate1.crt > chain.crt</font></div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">The configuration of cowboy is then done using the `<font face="monospace" class="gmail_msg">certfile</font>` and `<font face="monospace" class="gmail_msg">cacertfile</font>` options, for example:</div><div class="gmail_msg"><font face="monospace" class="gmail_msg">  [</font></div><div class="gmail_msg"><font face="monospace" class="gmail_msg">    {certfile, "foo_com.crt"},</font></div><div class="gmail_msg"><font face="monospace" class="gmail_msg">    {cacertfile, "chain.crt"}</font></div><div class="gmail_msg"><span style="font-family:monospace" class="gmail_msg">  ]</span></div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">These options are specified in the documentation of the Erlang SSL app (<a href="http://erlang.org/doc/man/ssl.html" class="gmail_msg" target="_blank">http://erlang.org/doc/man/ssl.html</a>)</div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">Hope this helps,<br class="gmail_msg"></div><div class="gmail_msg">Ali</div><div class="gmail_msg"><br class="gmail_msg"></div></div><br class="gmail_msg"><div class="gmail_quote gmail_msg"></div><div class="gmail_quote gmail_msg"><div class="gmail_msg">On Fri, Dec 30, 2016 at 11:24 AM Frank Muller <<a href="mailto:frank.muller.erl@gmail.com" class="gmail_msg" target="_blank">frank.muller.erl@gmail.com</a>> wrote:<br class="gmail_msg"></div></div><div class="gmail_quote gmail_msg"><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi guys,<div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">I would like to configure my "<span style="font-family:Helvetica;font-size:12pt" class="gmail_msg">Comodo PositiveSSL" certificates with Cowboy. </span></div><div class="gmail_msg"><font face="Helvetica" class="gmail_msg"><br class="gmail_msg"></font></div><div class="gmail_msg"><font face="Helvetica" class="gmail_msg">So far the self-signed OpenSSL certificates I've generated worked as expected. But I've no idea how to configure the "</font><span style="font-family:Helvetica;font-size:12pt" class="gmail_msg">Comodo" ones. </span><font face="Helvetica" class="gmail_msg"><div class="gmail_msg"><p class="m_3691111631730224356m_1091408658512042674p1 gmail_msg"><span class="m_3691111631730224356m_1091408658512042674s1 gmail_msg"><br class="gmail_msg"></span></p><p class="m_3691111631730224356m_1091408658512042674p1 gmail_msg"><span class="m_3691111631730224356m_1091408658512042674s1 gmail_msg">Can someone point me to a tutorial please? Or help on the setup?</span></p><br class="gmail_msg"><br class="gmail_msg"><br class="gmail_msg"></div></font><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">Thanks in advance.</div><div class="gmail_msg"><br class="gmail_msg"></div><font face="Helvetica" class="gmail_msg">N.B: Comodo provides explanations for Nginx</font>, Apache, etc. But not Cowboy unfortunately :-(</div><div class="gmail_msg"><br class="gmail_msg"><div class="gmail_msg">Happy new year !!!</div><div class="gmail_msg">/Frank</div></div></blockquote></div><div class="gmail_quote gmail_msg"><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br><br>_______________________________________________<br class="gmail_msg"><br><br>erlang-questions mailing list<br class="gmail_msg"><br><br><a href="mailto:erlang-questions@erlang.org" class="gmail_msg" target="_blank">erlang-questions@erlang.org</a><br class="gmail_msg"><br><br><a href="http://erlang.org/mailman/listinfo/erlang-questions" rel="noreferrer" class="gmail_msg" target="_blank">http://erlang.org/mailman/listinfo/erlang-questions</a><br class="gmail_msg"><br><br></blockquote></div><br><br></blockquote></div></div>