[Case 99757] Website SSL activation error

radeonpower

Well-Known Member
Jul 23, 2009
149
4
68
Iceland
cPanel Access Level
Root Administrator
Hello, I have a client who has imported his SSL certs to his account using SSL Manager, which worked fine but when he tries to activate it on a the website this error occurs.

The certificate could not be installed on the domain “domain.com”.
error Syntax error on line 4856 of [Test Configuration File]:

The address or port is invalid
: Syntax error on line 4856 of [Test Configuration File]:

The address or port is invalid
I've tried to reinstall the cert, rebuilt httpd.conf and no success.

Ticket #4887917
 
Last edited:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,219
463
Hello :)

Internal case number 99757 is open to address the "The address or port is invalid" error message when attempting to install an SSL certificate with a CABundle that's used with other certificates. The workaround at this time is to temporarily disable proxy subdomains within "WHM >> Tweak Settings".

Thank you.
 

MatanUbe

Registered
May 2, 2014
3
0
1
cPanel Access Level
Root Administrator
Hi,

Disabling the proxy subdomains didn't do the trick for me. :(

Any idea when this will be fixed? My one cert expires on the 11th of May. I've got the renewed one, but can't install it.

Any advise? Thanks.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,219
463
Disabling the proxy subdomains didn't do the trick for me. :(
Please open a support ticket so we can take a closer look. You can post the ticket number here so we can update this thread with the outcome.

Thank you.
 

cPanelPeter

Senior Technical Analyst
Staff member
Sep 23, 2013
576
19
143
cPanel Access Level
Root Administrator
Hello,

Just to update this thread, we are presently awaiting access to your server. Once we have that, we can investigate the issue and hopefully get the SSL certificate installed for you.
 

apolix

Member
Nov 16, 2006
12
0
151
Just to let anyone else know, temporary disabling IPv6 fixes the problem.
Could someone please clarify exactly what was disabled.

I have a site on which I'm unable to install a new SSL cert while the old one has expired. The site does not have IPv6 enabled. There are other IPv6 sites active on the same server.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,219
463
Could someone please clarify exactly what was disabled.

I have a site on which I'm unable to install a new SSL cert while the old one has expired. The site does not have IPv6 enabled. There are other IPv6 sites active on the same server.
Please see the following from my earlier post:
Internal case number 99757 is open to address the "The address or port is invalid" error message when attempting to install an SSL certificate with a CABundle that's used with other certificates. The workaround at this time is to temporarily disable proxy subdomains within "WHM >> Tweak Settings".
Is the issue not resolved when disabling proxy subdomains? Are you sure it's the same error message?

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,219
463
You can disable IPv6 for all accounts using:

"WHM Home » IP Functions » Enable IPv6"

Simply select all, and click on disable.

Thank you.
 

apolix

Member
Nov 16, 2006
12
0
151
You can disable IPv6 for all accounts using:

"WHM Home » IP Functions » Enable IPv6"

Simply select all, and click on disable.
This is simply not an option. I have 30+ customers actively using the IPv6 versions of their sites and I can't have the IPv6 going away randomly.
 

wswd

Well-Known Member
Aug 9, 2005
144
16
168
cPanel Access Level
Root Administrator
Please see the following from my earlier post:


Is the issue not resolved when disabling proxy subdomains? Are you sure it's the same error message?

Thank you.

I have been saying it is an IPv6 issue since May 1st, both in my tickets and my other thread on this subject. Disabling the proxy subdomains didn't fix it for me either, on any of our servers. I don't think that's the issue at all.

As I noted in my other thread and in my ticket, the corruption comes when a portion of the IPv6 block gets inserted into the httpd.conf file. In my case, it was [2001:443> which pointed to the first part of our IPv6 assignment, but left everything else off.

That is what is causing the corruption. The proxy subdomains work just fine.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,219
463
This is simply not an option. I have 30+ customers actively using the IPv6 versions of their sites and I can't have the IPv6 going away randomly.
Right, I was only clarifying the action that another user completed on their system as a temporary workaround. With internal case 99757, the primary issue is that a syntax error is introduced into the httpd.conf file in the form of a truncated IPv6 address in the proxy subdomain SSL virtualhost. It's important to ensure the missing CA bundle exists before attempting a workaround.

Thank you.