My SSL Cert appears to have installed properly but Firefox doesn't like it

Benji Durden

Registered
Feb 27, 2015
3
0
1
Boulder, Colorado, United Stat
cPanel Access Level
Root Administrator
I bought a new Trustwave and installed everything the same way I did last year using the "Install an SSL Certificate on a Domain". Last year it worked as expected. This year cPanel said everything was fine but Firefox says the site is untrusted "The certificate is not trusted because no issuer chain was provided." I did install the chain.cer. Trustwave says it isn't their fault...it must be me doing it wrong but won't tell what to fix. Any ideas on what to try next. Google hasn't helped.

:confused:
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,222
463
Hello :)

When using "WHM >> SSL/TLS >> Install an SSL Certificate on a Domain", did you leave the CABundle field blank or paste Trustwave's CABundle in the field?

Thank you.
 

Benji Durden

Registered
Feb 27, 2015
3
0
1
Boulder, Colorado, United Stat
cPanel Access Level
Root Administrator
Hello :)

When using "WHM >> SSL/TLS >> Install an SSL Certificate on a Domain", did you leave the CABundle field blank or paste Trustwave's CABundle in the field?

Thank you.
I pasted in the Trustwave CABundle (chain.cer) in the field. All of the fields had green check marks by them when I was done. I restarted the apache server...
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,222
463
Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,222
463
To update, it was determined that this issue is associated with internal case number 136457. This case will ensure verification of CA bundles via OpenSSL before accepting the CA bundle for installation. It also adds logic to pick the "best" of multiple (valid) CA bundles. The temporary workaround at this time is to remove the existing SSL certificate completely via "WHM -> Manage SSL Hosts", and then reinstall the SSL certificate with the desired bundle. You can monitor our change log for this case number at:

cPanel - Change Log

Thank you.