Cpanel/WHM SSL cert error during install?

[jamesbond]

I just installed an instantSSL cert so I can logon securely to WHM/Cpanel.
I installed it through 'Change CPanel/WHM certificate' instead of 'Install a certificate and setup domain'

This is correct right?

It seems to work, but I was wondering what error message below means exactly:

--------------
Attempting to verify your certificate.....
Cerificate appears to be intact
/usr/local/cpanel/share/ssl/certs/xxxxxxxxx.com.crt.test: /C=xx/2.5.4.17=xxxxx/ST=xxxxxxx/L=xxxxxxx/2.5.4.9=xxxxxxxxx/O=xxxxxxxxxxx/OU=IT/OU=InstantSSL/CN=xxxxxxxxxx.com
error 20 at 0 depth lookup:unable to get local issuer certificate

Restarting SSL Support
Certificate has been installed!
----------

I also get 1 warning when I log on :

the security certificate was issued by a company you have chosen not to trust...

How can I get rid of this warning?

I've read the how-to on installing SSL by itf, but I still don't know how to get rid of this error.

There are 2 places where I see SSL keys/certs


1. /usr/local/cpanel/share/ssl/certs/

and

2. /usr/share/ssl/certs/


Is the following correct then?

1. location 1 is for the WHM/CPanel cert (secure login 2083 and 2087 )

2. location 2 is the place of the certificates for domains


I still get this warning 'the security certificate was issued by a company you have chosen not to trust...' when I use https://secure.mydomain:2087
Maybe it has something to do with the fact that a secure.mydomain.crt.test is created every time I try to install the certificate...I don't know why.

Anyone?

[jamesbond]

No it is not a self signed certificate, I ordered an Instant SSL certificate and installed it through WHM.

When I look at the certificate details (click on the lock) when I browse through https://secure.mydomain.com:2087 it does show my Instant SSL data and has a valid expiry date etc.

[jamesbond]

PM sent.

I don't have AIM installed, I do have ICQ.

[jamesbond]

Still not solved

the problem is not in getting https://secure.mydomain.com to work without the warning.
(I just install it through 'Install an SSL Certificate and Setup the Domain ')


The problem is getting https://secure.mydomain.com:2083 and https://secure.mydomain.com:2087 getting to work without getting a warning (the certificate was issued by a company you have chosen not to trust etc.)

SSL for port 2083 and 2087 should be done through 'Change cPanel/WHM Certificate' right?

I can't find any information about this in the docs, cpanel support hasn't replied yet...

[moronhead]

ok bond007 , try this:

https://xxx.xxx.xxx.xxx:2083

Put any username/password (the password can be your root password) to login to cpanel.

xxx.xxx.xxx.xxx is your server's main IP address.

Are you still getting the warnings? You shouldn't!

Regards,
Norman

[jamesbond]

Actually when I use my ip address instead of secure.mydomain.com I get 2 warnings instead of 1

1. the certificate was issued by a company you have chosen not to trust etc.)

2. name does not match the name of site.

The second warning is obvious because the certificate is issued for secure.mydomain.com

It's the first warning that always comes up when I connect through 2083 or 2087

[moronhead]

That's strange. You should be getting those errors only when you logon to 2087, not when you login to 2083.

Regards,
Norman

[jamesbond]

Why should I be getting warnings at all ?
I installed a valid SSL certificate.

[Marty]

You are getting warnings because the cert you installed for the domain is specifically installed for port 443 only. The other ports for cpanel, webmail, etc, will use the server selfsigned cert.

[jamesbond]

How can I set it up so that I don't get warnings when I use 2083 or 2087 then?

That's what I've been trying to figure out.

[Marty]

Sorry, I went back and reread your post. I misunderstood what you were trying to do. I have never tried to install a cert for that, so I am not sure what is going on except the possibility that the Balimore Intermediary cert did not install correctly in the process.

[jamesbond]

[quote:5e805810ec][i:5e805810ec]Originally posted by Marty[/i:5e805810ec]

I have never tried to install a cert for that, so I am not sure what is going on except the possibility that the Balimore Intermediary cert did not install correctly in the process.[/quote:5e805810ec]

It seems I am the only one that wants to get rid of those warnings
I would like my CPanel customers not to see that warning when they log on to port 2083 for the first time.

As I said, installing certs for domains (port 443) works perfectly fine, but that's not what I'm after in this case.

I submitted a cpanel support ticket, haven't gotten a reply from them yet though

[jamesbond]

Ok, I've tried everything, even manually replacing the mycpanel.pem file in :
/usr/local/cpanel/etc/

I still get the warning...

Now I just read the following in the WHM news section:
------------------------------
cabundle support for Cpanel/WHM SSL Certificates that require a cabundle now work with cPanel's ssl (port 2083/2087/2096) (5.2.0 build 115 or later only)
------------------------------

I suppose that has something to do with it, but I'm running WHM 5.2.0 Cpanel 5.3.0-R6, which is more recent than 5.2.0 build 115 I would think.

[Dathorn_ADT]

Did you ever figure it out? I'm having this same problem right now and I'd really like to take care of it...

[jamesbond]

[quote:acc7979671][i:acc7979671]Originally posted by Dathorn_ADT[/i:acc7979671]

Did you ever figure it out? I'm having this same problem right now and I'd really like to take care of it...[/quote:acc7979671]

What warning do you get exactly?

The problem with the warning and instantssl has been fixed in the recent releases.
However now I have an authentication window popping up when I connect to 2083 or 2087