SSL is Acting weird... Please Help!!!!

[Dr. Bogger]

I installed a SSL certificate in WHM and I get the following when i goto the website:

The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.

I installed the file the CA Bundle and it still displays that error. Whats going on?

I have installed many ssl certificates in my life and I know I am doing it correctly, but it is just not working.

I have tested it on 4 computers and it does the same thing on all of them.

Can someone please help me?

Thanks.
Sean.

[jrf]

Is this an instant SSL from Komodo? I had the same problem the other day, I can find out what was done to solve it if was the same thing?

By the way, it would work fine for me in firefox but not IE.

[Dr. Bogger]

Hello,

Yes, one of the certificates was a Comodo cert. But i also had another one from FreeSSL.com and that one didnt work eather.

But it seems the problem for me was that the whm ssl installer was not entering the feild above into the httpd.conf file.

I seen 2 entres in the cpanel bugzilla about this but with no responce... So I wonder if cpanel know about this issue... Can someone please contact them about this?

Thanks.

[Peoplespaces]

I believe this is browser specific. You have to choose to trust the certificate supplier in the browser. Thwaite and Verisign are installed by default in IE, but others may not be.

[Dr. Bogger]

Hello,

I seems that the problem was that when you installed a certificate from WHM, it did not add the the following feild: SSLCACertificateFile /usr/share/ssl/certs/yourdomain.cabundle to the httpd.conf file.

This is what I did to fix it:

1. Installed the ssl certificate through WHM.

2. Edit the httpd.conf file and add the following entry into the correct place: SSLCACertificateFile /usr/share/ssl/certs/yourdomain.cabundle.

3. Restart Apache.

Done.

That is what fixed my problem.

[Host4u2]

#SSLCaCertificateFile /usr/share/ssl/certs/yourdomain.com.cabundle

This directive is part of Apache2 but not Apache 1.3 which Cpanel supports. Please consult the following.

http://httpd.apache.org/docs-2.0/mod...ertificatefile

[Dr. Bogger]

OMG, thats the exact thing cpanel just said, but it is completely wrong.

This was my email to cpanel:

--------------
This is what I added to httpd.conf file and it works just fine:
SSLCaCertificateFile /usr/share/ssl/certs/yourdomain.com.cabundle

as a matter of fact, I HAVE to add that feild to the httpd.conf file
or ssl will not work properly.

You said it will brake the apache conf file, but it dont for me, and I
dont use apache 2.0. Actualy, It FIXES ssl.
-------------

Now please, someone here has gatta know this.

This is what heppens to ssl if i dont add that feild to the httpd.conf file:



URL to the Image: http://www.sixpointnine.net/ssl.gif
Note: I got this picture of google image search.

That is the same exact error I get if i dont add it, but if I do add it, it goes away. Whats up with that?

The real problem I am having is the Install SSL Certificate Feature in WHM dont add that feild to the httpd.conf file. And because of that, it causes that error.

Please let me know whats going on with this.

Thanks.

[Host4u2]

If I add "SSLCaCertificateFile /usr/share/ssl/certs/mydomain.com.cabundle" (no quotes) to my httpd.conf it causes Apache to fail!!! Why? I'm told again that "This directive is part of Apache2 but not Apache 1.3 which Cpanel supports."

[Dr. Bogger]

Ok, Cpanel just emailed me back, he said "This has been fixed in the edge version."

[DWHS.net]

I am still having this problem, any news on this I run release.

Version: WHM 9.9.0 cPanel 9.9.0-C55

It showed the ca when installinmg the cert so I not sure what is wrong unless cpanel has a bug.

[flash7]

UP

same issue

IE browser is dead

[icanectc]

#SSLCaCertificateFile /usr/share/ssl/certs/yourdomain.com.cabundle

This directive is part of Apache2 but not Apache 1.3 which Cpanel supports. Please consult the following.

http://httpd.apache.org/docs-2.0/mod...ertificatefile

What are you talking about?? Your completely wrong. You have to add SSLCACertificeFile to the apache file or you will always get the trust issue.

[icanectc]

UP

same issue

IE browser is dead

If you visit the comodogroup's support center it will give you detailed instructions on how to fix the problem. It's a 5sec fix.

[Dr. Bogger]

or you could upgrade cpanel to the latest release... It is fixed in that version ^_^

[Host4u2]

HostMeg.com

Latest Release? The "RELEASE" (9.7.7-RELEASE_15) release?