cpanel11 service certificates...

[4u123]

Hi,

I just purchased a wildcard cert and installed it in the cPanel/WHM/Webmail Service section of cpanel11. The cert appeared to install correctly but it is coming up as untrusted even though I pasted in the intermediate / cabundle crt. Its a cheap cert so I think I need to force the ca to be acknowledged by the server somehow.

In previous versions of cpanel, I understand that a file in /usr/local/cpanel/etc needed updating with the cabundle so that it comes up as trusted in the browser. However - the files mentioned in previous forum posts dont exist on the cpanel 11 server so I'm guessing its all been moved around.

Can anyone advise on what I should do to get the server to identify the ca and show up as trusted ?

Thanks in advance.

[4u123]

I Notice that in /var/cpanel/ssl/cpanel there are three files...

mycpanel.pem - contains the key and crt for the cert I installed
mycpanel.cabundle - contains the ca bundle for the cert I installed
cpanel.pem - contains a different key and crt

Thats about all I've been able to work out. If the correct bundle is installed, why does my browser say that "The security certificate presented by this website was not issued by a trusted certificate authority."

[4u123]

Ok I fixed it!!!

Edited mycpanel.pem and just pasted the cabundle under the crt. It looks like the WHM process that creates the files - doesnt add the cabundle to the file so adding it manually has done the trick!

[cpanelnick]

Are you running stunnel ?

ps uxaww |grep stunnel