Android and iOS swear at ssl certificate

Question

Android

Colleagues, help, pliz, figure it out ...

There is a web server based on linux + apache. An ssl certificate (wildcard) signed by RapidSSL CA (upstream GeoTrust Global CA) is attached to this server.

When I go to this server from a computer (firefox, chrome, opera, opera mobile (via the android emulator)), the browser says that everything is fine, the certificate is reliable.

But if I log in with Android (any browser) and iOS, then the browsers say that the certificate was received from an untrusted certificate authority.

What can be here? Where to dig?
Maybe for Apache you need to do some additional settings?

Answer 1

Thank you all for your help. I figured it out ... I
had to specify the file in SSLCertificateFile, in which there is only the server certificate that RapidSSL issued to me. And in SSLCACertificateFile - RapidSSLCABundle.crt, which was downloaded from the RapidSSL website (in this file, Rapid and Geotrust certificates).
I had all the certificates in SSLCertificateFile (I merged them into one file) in order - mine, rapid, geotrust. And in SSLCACertificateFile there is a standard /etc/pki/tls/certs/ca-bundle.crt (there is no rapid in it).

Answer 2

Yes, all 3 certificates. Key-file is also specified.

Answer 3

Perhaps there are other sites on ssl at this address?

Answer 4

Angel2S2, exactly the same problem with the same certificate, I have a server with CentOS, VDS dedicated IP, one domain and one site on this IP. You can describe in more detail where to go, in which files and what needs to be registered.

Answer 5

To make it work on android and ios, you need to add:
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/domain.tld/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/domain.tld/privkey.pem
+SSLCertificateChainFile /etc/letsencrypt/live/ domain.tld/chain.pem