The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Please help me install this SSL Cert

Discussion in 'General Discussion' started by buyourweb, Sep 9, 2004.

  1. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    I purchased a Turbo SSL Certificate from godaddy and have tried many, many times to install the SSL Certificate through cPanel/WHM. I have followed your documentation and Starfields docs exactly and always have the same problems. Please go to the Website with SSL Cert and help me out!!
    Thanks in advanced, I know it is something simple because I'm a Noobie.....
    Brad
    support@buyourwebhosting.com
     
  2. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    Any Ideas.
    The website I'm having a hard time making the SSL Certificate to work is:
    https://nesingtreasures.com
    Thanks everyone.
    Peace
     
  3. php-dawg

    php-dawg Active Member

    Joined:
    Jul 9, 2003
    Messages:
    31
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Atlanta, GA
    First, you need to go to the right address. The certificate that you purchased was for https://www.nestingtreasures.com, you must use the www or else it will always fail. Second, you have to do the following to your httpd.conf file:

    Under the following lines:

    SSLEnable
    SSLCertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.crt
    SSLCertificateKeyFile /usr/share/ssl/private/www.nestingtreasures.com.key

    Enter this line:
    SSLCACertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.cabundle

    Restart httpd and all should be well.
     
  4. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    <IfDefine SSL>
    <VirtualHost 66.197.152.39:443>
    ServerAdmin webmaster@www.nestingtreasures.com
    DocumentRoot /home/melete/public_html
    ServerName www.nestingtreasures.com
    CustomLog /usr/local/apache/domlogs/www.nestingtreasures.com-ssl_log "%t %{version}c %{cipher}c %{clientcert}c"
    User melete
    Group melete
    SSLEnable
    SSLCertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.crt
    SSLCertificateKeyFile /usr/share/ssl/private/www.nestingtreasures.com.key
    SSLCertificateChainFile /usr/share/ssl/certs/sf_issuing.crt
    SSLLogFile /var/log/www.nestingtreasures.com
    UserDir public_html
    ScriptAlias /cgi-bin/ /home/melete/public_html/cgi-bin/
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
    </VirtualHost>
    </IfDefine>

    Here is my conf file.
    When I added the line from above the secure site stopped working. I put it back like it is above and it at least works.
    Thanks for your help but it didn't work, what did I do wrong
    Brad
     
  5. markermaid

    markermaid Registered

    Joined:
    Dec 1, 2003
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Arizona
    You need a CA Bundle

    Here is how to create a cabundle.

    How to Create a CABundle

    Installations of both the <a href="http://certificates.starfieldtech.com/repository/valicert_class2_root.crt">Trusted Root Certificate</a> and our <a href="http://certificates.starfieldtech.com/repository/sf_issuing.crt">Intermediate Certificate</a> to your server may require a CABundle.crt or it may require you to copy and paste from a CABundle.txt file.

    You can create your own CABundle file using Notepad or a similar text only application.

    *Open a blank text document and save it as CABundle.txt

    * Visit the <a href="http://www.starfieldtech.com/repository">Starfield Technologies Repository</a>

    *Right click on the Trusted Root Certificate named:
    valicert_class2_root.crt and SAVE the file to your desktop as a .txt file

    *Right click on the Intermediate Certificate named: sf_issuing.crt and SAVE the file to your desktop as a .txt file

    *Open the saved file named: valicert_class2_root.txt and copy and paste the contents into the text file named CABundle.txt ( Be sure not to copy any extra spaces after the last dash of the
    code.)

    *Open the saved file named: sf_issuing.txt and copy and paste the contents into into the text file named CABundle.txt, immediately following the previous code. ( Be sure not to copy any extra spaces after the last dash of the code.)

    *Save the file. If your server calls for a CABundle.crt file, you can save a copy of the file as a .crt file.
     
  6. markermaid

    markermaid Registered

    Joined:
    Dec 1, 2003
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Arizona
    Don't forget

    to restart the server :)
     
  7. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    Does anyone know of a good resource on learning SSL Certificates. I really can't find any info on what all the certs mean and what all the differences are like www.nest.com or just nest.com. If I can ever make this Cert work, I'll need to install another SSL Cert on another domain..YUK

    Thanks

    PS Stay away from Starfield, they will not answer my tech support tickets....
     
  8. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    Thanks everyone for the help
    But I still get the pop up error message everytime I go to the secure domain.
    The error message says that the 128 bit is working but there is a problem with the certificate
    ??????????????????????????????????????
    https://www.nestingtreasures.com/nest

    This is my conf file now, yes I do have the file in the correct folder

    SSLEnable
    SSLCertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.crt
    SSLCertificateKeyFile /usr/share/ssl/private/www.nestingtreasures.com.key
    SSLCACertificateFile /usr/share/ssl/certs/www.nestingtreasures.com.cabundle
    SSLCertificateChainFile /usr/share/ssl/certs/sf_issuing.crt
    SSLLogFile /var/log/www.nestingtreasures.com

    Peace
     
  9. Host4u2

    Host4u2 Well-Known Member

    Joined:
    Mar 24, 2002
    Messages:
    248
    Likes Received:
    0
    Trophy Points:
    16
    The popup (only seen using Internet Explorer) is a bug in the last Stable release of WHM/Cpanel ( WHM 9.4.0 cPanel 9.4.1-S65). There has been do-it-yourself fixes that have worked for many, but not for us (running RHE3). I read in these forums that this has been fixed in an Edge release (and maybe by now the "Release" release), but we are still waiting for the next Stable release before reinstalling the Certificate(s).
     
  10. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    Do you know what this fix is???

    Peace
     
  11. Host4u2

    Host4u2 Well-Known Member

    Joined:
    Mar 24, 2002
    Messages:
    248
    Likes Received:
    0
    Trophy Points:
    16
  12. tecnotronico

    tecnotronico Active Member

    Joined:
    Apr 17, 2004
    Messages:
    28
    Likes Received:
    1
    Trophy Points:
    3
    Have you tried freessl.com

    Fellows,

    I have used freessl.com and looks fine. The instalation is easy and they have a trial version for 30 days. Once tested if you want to buy it the cost is 19US$.

    Regarding documentation, they have the info on how to do the installation for cpanel and other systems, besides, they have pdf files with a complete documentation.

    I hope this could help. Regards ;)
     
  13. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    I think I'm going to tell StarField to take there money back and try a SSL Cert from freessl.com

    Thanks for the great tips..

    Peace
     
  14. Host4u2

    Host4u2 Well-Known Member

    Joined:
    Mar 24, 2002
    Messages:
    248
    Likes Received:
    0
    Trophy Points:
    16
    As documented, the problem is the way WHM is handling (installing) the Cert... not the cert.
     
  15. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    I would believe you but I have also tried installing the cert using The SSH Shell using Putty and have the same problems. Installing with WHM just took less time.
    Peace
     
  16. buyourweb

    buyourweb Member

    Joined:
    Apr 23, 2004
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    Hey Everyone
    Thank you all for helping so much and thanks for the great learning experience..
    I have the site working just fine now.
    First I did install the SSL Cert wrong.
    I did have to add the CABundle by hand and not thur WHM
    Second I had to change some lines in the osCommerce script to make the errors go away.
    Thanks again everyone
    Have a good week
    Peace
    Brad
     
Loading...

Share This Page