Cpanel/WHM SSL cert error during install?

[LVWH]

It seems I get this stuff too. I have been trying to install an SSL Cert for a client and I have had nothing but grief. I then find out that CPANEL Created the RSA Key incorrectly. After trying again then the error came up as being self signed and get warnings about it when browsing the site.

I'm still waiting on a respose from someone else but I think it has something to do with the CA Bundle not being installed with the cert. I will try to update you folks on this as I go.

Cheers,

LVWH

[Kurieuo]

Any news on this? I get the same message (i.e. not verified) after installing the InstantSSL certificate for a domain.

I have a feeling it is also to do with the bundle not being setup correctly - however I don't have access to the root, so I can't set it up manually to make sure its not cPanel configuring wrong or something.

[sexy_guy]

Originally posted by jamesbond
Ok, I've tried everything, even manually replacing the mycpanel.pem file in :
/usr/local/cpanel/etc/

I still get the warning...

Now I just read the following in the WHM news section:
------------------------------
cabundle support for Cpanel/WHM SSL Certificates that require a cabundle now work with cPanel's ssl (port 2083/2087/2096) (5.2.0 build 115 or later only)
------------------------------

I suppose that has something to do with it, but I'm running WHM 5.2.0 Cpanel 5.3.0-R6, which is more recent than 5.2.0 build 115 I would think.

This is an old msg, no reply

[ljprevo]

I don't care if it is old, it NEVER got answered. I am trying this same thing, want secure, no error messages on 2087 and 2083 but you can't get a straight answer anwhere here or in the docs.

[tntmom5]

I was having this same problem and also when I used https to certain pages. This is how I fixed it.

For some reason whm did not write the cabundle entry in the httpd.conf file. This line was missing:

SSLCACertificateFile /usr/share/ssl/certs/mysecuresite.com.cabundle

Found the info on doing this here:

http://forums.cpanel.net/showthread....hlight=Freessl

Tracy

[joezeppy]

It seems to me that this error message has more to do with the browser than the setup. In other words, maybe most browsers don't "trust" InstantSSL by default.

In other words, if it were a thawte or Verisign cert, the pop up would not say that.

What do you guys think?

(I know that would suck, but it seems to make sense to me)

After all, what can we expect for $69.00?

cPanel.net Support Ticket Number:

[tntmom5]

My cert from Install SSL works just fine now, since I added the line in the config file for the cabundle.

When installing from scatch in WHM, just add the cabundle there. I had some other issues that I think cased my problems. Ok, I'll confess, I mistyped the domain name while installing the cert.

All is well now.

Tracy

cPanel.net Support Ticket Number:

[joezeppy]

Since this thread seems so active, may I ask a little advice on the same topic?

I am trying to install my cert (from InstantSSL too) and I just seem to be missing something...

Is it possible to install a cert just using WHM? I don't know what the whole procedure is. I'm trying to install it for just one domain.

The primary domain is www.mydomain.com. I would like the secure portion to be secure.mydomain.com and that's how I ordered the cert.

I have gone through the process of installing the cert in WHM, but I don't see where to place my files and how to test and access them.

Any advice or help on the procedure would really be appreciated.

Thanks,

cPanel.net Support Ticket Number:

[tntmom5]

These are the steps I used to install a shared cert on my server, for my client's use. This is not for the whm/cpanel cert that is discussed at the beginning of this thread.

(This part originally posted by Wallaby and Mike on the Ventures Online forums and combined here for clarity)

Say your domain is mydomain.com:

-- Set up a subdomain as a separate account (ie, in WHM, not in CPanel, so it gets its own space) with a dedicated IP, (required for SSL), say http://secure.mydomain.com.

-- Purchase and install the ssl certificate for that domain. To install a certificate, you need to use WHM's "Generate a SSL Certifcate and Signing Request", then purchase your SSL, then use WHM's "Install a SSL Certificate and Setup the Domain". [Tracy: I copied and pasted the certificate and key in the boxes, watch for leading and trailing spaces, those are no nos. For mine, I had to use the cabundle for it to work.]

-- Each user can now access their files using your certificate. Say the username for the account for somedomain.com is some001, they would access their website files using:

https://secure.mydomain.com/~some001/

so for a file in their space called myfile.htm it'd be:

https://secure.mydomain.com/~some001/myfile.htm

cPanel.net Support Ticket Number:

[joezeppy]

Hi TNT,

Thanks for the help.

Do you have to set up any type of redirect in the main domain?

Where would you (or your users) place the files for the secure portion?

Or as long as they use https can they reference any file in their site?

cPanel.net Support Ticket Number:

[tntmom5]

Hi Joe,
I can only tell you how my server is set up.

When they use the cert the point the browser to
https://secure.tntgibson.com/~theirusername/

Then it point to their domain area, in my case public_html in their account. It is pointing to the same files, just securely.

They can reference any file in their site.

cPanel.net Support Ticket Number: