INFRA-233 mycivi.org isn't serving intermediate CA certs for Let's Encrypt
On Ubuntu 16.04LTS and Debian 8.6, when I try to use the Site Profile CiviConnect app, I get "Error: Received garbled message".
I fired up tcpdump (capture attached) which reported: 146.148.42.42 TLSv1.2 73 Alert (Level: Fatal, Description: Unknown CA)
I verified the "Unknown CA" error with: curl https://mycivi.org
After some reading, I ran the following command, which shows that no intermediate certs are being served: openssl s_client -connect mycivi.org:443
I would expect to see the Let's Encrypt CA cert listed in the "Certificate chain" section.
My reading was here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains
I see mycivi.org is running Apache: https://access.redhat.com/solutions/43575
Original author: palantejon