Please help me install this SSL Cert

[buyourweb]

I purchased a Turbo SSL Certificate from godaddy and have tried many, many times to install the SSL Certificate through cPanel/WHM. I have followed your documentation and Starfields docs exactly and always have the same problems. Please go to the Website with SSL Cert and help me out!!
Thanks in advanced, I know it is something simple because I'm a Noobie.....
Brad
support@buyourwebhosting.com

[buyourweb]

Any Ideas.
The website I'm having a hard time making the SSL Certificate to work is:
https://nesingtreasures.com
Thanks everyone.
Peace

[php-dawg]

First, you need to go to the right address. The certificate that you purchased was for https://www.nestingtreasures.com, you must use the www or else it will always fail. Second, you have to do the following to your httpd.conf file:

Under the following lines:

SSLEnable
SSLCertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.crt
SSLCertificateKeyFile /usr/share/ssl/private/www.nestingtreasures.com.key

Enter this line:
SSLCACertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.cabundle

Restart httpd and all should be well.

[buyourweb]

<IfDefine SSL>
<VirtualHost 66.197.152.39:443>
ServerAdmin webmaster@www.nestingtreasures.com
DocumentRoot /home/melete/public_html
ServerName www.nestingtreasures.com
CustomLog /usr/local/apache/domlogs/www.nestingtreasures.com-ssl_log "%t %{version}c %{cipher}c %{clientcert}c"
User melete
Group melete
SSLEnable
SSLCertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.crt
SSLCertificateKeyFile /usr/share/ssl/private/www.nestingtreasures.com.key
SSLCertificateChainFile /usr/share/ssl/certs/sf_issuing.crt
SSLLogFile /var/log/www.nestingtreasures.com
UserDir public_html
ScriptAlias /cgi-bin/ /home/melete/public_html/cgi-bin/
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>
</IfDefine>

Here is my conf file.
When I added the line from above the secure site stopped working. I put it back like it is above and it at least works.
Thanks for your help but it didn't work, what did I do wrong
Brad

[markermaid]

Here is how to create a cabundle.

How to Create a CABundle

Installations of both the <a href="http://certificates.starfieldtech.com/repository/valicert_class2_root.crt">Trusted Root Certificate</a> and our <a href="http://certificates.starfieldtech.com/repository/sf_issuing.crt">Intermediate Certificate</a> to your server may require a CABundle.crt or it may require you to copy and paste from a CABundle.txt file.

You can create your own CABundle file using Notepad or a similar text only application.

*Open a blank text document and save it as CABundle.txt

* Visit the <a href="http://www.starfieldtech.com/repository">Starfield Technologies Repository</a>

*Right click on the Trusted Root Certificate named:
valicert_class2_root.crt and SAVE the file to your desktop as a .txt file

*Right click on the Intermediate Certificate named: sf_issuing.crt and SAVE the file to your desktop as a .txt file

*Open the saved file named: valicert_class2_root.txt and copy and paste the contents into the text file named CABundle.txt ( Be sure not to copy any extra spaces after the last dash of the
code.)

*Open the saved file named: sf_issuing.txt and copy and paste the contents into into the text file named CABundle.txt, immediately following the previous code. ( Be sure not to copy any extra spaces after the last dash of the code.)

*Save the file. If your server calls for a CABundle.crt file, you can save a copy of the file as a .crt file.

[markermaid]

to restart the server

[buyourweb]

Does anyone know of a good resource on learning SSL Certificates. I really can't find any info on what all the certs mean and what all the differences are like www.nest.com or just nest.com. If I can ever make this Cert work, I'll need to install another SSL Cert on another domain..YUK

Thanks

PS Stay away from Starfield, they will not answer my tech support tickets....

[buyourweb]

Thanks everyone for the help
But I still get the pop up error message everytime I go to the secure domain.
The error message says that the 128 bit is working but there is a problem with the certificate
??????????????????????????????????????
https://www.nestingtreasures.com/nest

This is my conf file now, yes I do have the file in the correct folder

SSLEnable
SSLCertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.crt
SSLCertificateKeyFile /usr/share/ssl/private/www.nestingtreasures.com.key
SSLCACertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.cabundle
SSLCertificateChainFile /usr/share/ssl/certs/sf_issuing.crt
SSLLogFile /var/log/www.nestingtreasures.com

Peace

[Host4u2]

The popup (only seen using Internet Explorer) is a bug in the last Stable release of WHM/Cpanel ( WHM 9.4.0 cPanel 9.4.1-S65). There has been do-it-yourself fixes that have worked for many, but not for us (running RHE3). I read in these forums that this has been fixed in an Edge release (and maybe by now the "Release" release), but we are still waiting for the next Stable release before reinstalling the Certificate(s).

[buyourweb]

There has been do-it-yourself fixes that have worked for many

Do you know what this fix is???

Peace

[Host4u2]

Read the following entire thread for some fixes that apparently have worked for many: http://forums.cpanel.net/showthread....ust#post132291

[tecnotronico]

Fellows,

I have used freessl.com and looks fine. The instalation is easy and they have a trial version for 30 days. Once tested if you want to buy it the cost is 19US$.

Regarding documentation, they have the info on how to do the installation for cpanel and other systems, besides, they have pdf files with a complete documentation.

I hope this could help. Regards

[buyourweb]

I have used freessl.com and looks fine. The instalation is easy and they have a trial version for 30 days. Once tested if you want to buy it the cost is 19US$.

I think I'm going to tell StarField to take there money back and try a SSL Cert from freessl.com

Thanks for the great tips..

Peace

[Host4u2]

As documented, the problem is the way WHM is handling (installing) the Cert... not the cert.

[buyourweb]

As documented, the problem is the way WHM is handling (installing) the Cert... not the cert.

I would believe you but I have also tried installing the cert using The SSH Shell using Putty and have the same problems. Installing with WHM just took less time.
Peace