The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Getting SSL Error all of a sudden

Discussion in 'General Discussion' started by noimad1, Mar 23, 2004.

  1. noimad1

    noimad1 Well-Known Member

    Joined:
    Mar 27, 2003
    Messages:
    627
    Likes Received:
    0
    Trophy Points:
    16
    Ok, so all of a sudden I start getting a popup that says my certificate is not from a trusted company etc. etc. when I go to my https://mydomain.com

    I'm not sure why it started doing it all of a sudden.

    I tried to Update the certificate through web host manager and found this error:

    "unable to get local issuer certificate"

    This is an instantSSL cert.

    Anyone have any ideas on why this would crap out all of a sudden?
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Is the certificate for mydomain.com or www.mydomain.com? It makes a huge difference.
     
  3. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Also, if you view the certificate in your web browser, what does it say for the "issued to" domain?
     
  4. noimad1

    noimad1 Well-Known Member

    Joined:
    Mar 27, 2003
    Messages:
    627
    Likes Received:
    0
    Trophy Points:
    16
    Actually it was showing the correct domain. Also, I looked at it and it actually wasn't the domain not matching the certifcate error. It was an error that the issuer of the certificate was not a trusted source.

    The issue turned out to be an comodo (instantSSL) problem.

    Apparetnly they have some problems on cpanel boxes. They had me add one line to my httpd.conf file and create one text file with some information in it....

    That seemed to fix the problem.

    Damion
     
  5. Choppy

    Choppy Member

    Joined:
    May 8, 2002
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    noimad1,

    Tell us what you did and what you added we are having the same problems :(

    Regards
    Phillip
     
  6. noimad1

    noimad1 Well-Known Member

    Joined:
    Mar 27, 2003
    Messages:
    627
    Likes Received:
    0
    Trophy Points:
    16
    Per Comodo:

    I'm seeing an increase on support problems with cpanel.
    The way I have been fixing these is to manually log in as root, upload 1 file and add 1 line to the /etc/httpd/conf/httpd.conf ....

    The file you need is http://www.instantssl.com/ssl-certificate-support/cert_installation/ca_new.txt
    Place that file in any location on the server

    open the httpd.conf

    Look for the virtual host section for yourdomain.net

    Where you see these lines:
    SSLCertificateFile /etc/ssl/crt/yourdomainname.crt

    SSLCertificateKeyFile /etc/ssl/crt/private.key

    Add this one below it

    SSLCACertificateFile /etc/httpd/conf/ca.txt <---- changing that path bit to where you uploaded the above ca_new.txt file.


    restart the webserver and it will all work.
     
  7. noimad1

    noimad1 Well-Known Member

    Joined:
    Mar 27, 2003
    Messages:
    627
    Likes Received:
    0
    Trophy Points:
    16
    OK, so this started to happen again on another box we have. I tried the fix Comodo(instantssl) sent but it didn't work this time.

    I tried and tried to get this cert. to work. I uninstalled it, re-installed it, created a new CSR and got a new cert. Nothing would work.

    I am not happy with instantssl at all! Their support sucks and they are a pain to deal with. First of all it took almost 2 weeks just to get the certificate and then 5 days when I generated a new CSR to get a new certificate.

    Their support takes forever to respond as well.

    So my solution was to cancel with them and ask for a refund. Probably won't get it though.

    I went ahead and baught a Geotrust cert. from ev1servers.net (rackshack). I was able to purchase the certificate, have it sent to me and installed within 15 minutes! No problems at all.

    Damion
     
Loading...

Share This Page