SSL is Acting weird... Please Help!!!!

Dr. Bogger

Well-Known Member
Dec 21, 2003
95
0
156
I installed a SSL certificate in WHM and I get the following when i goto the website:

The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.

I installed the file the CA Bundle and it still displays that error. Whats going on?

I have installed many ssl certificates in my life and I know I am doing it correctly, but it is just not working.

I have tested it on 4 computers and it does the same thing on all of them.

Can someone please help me?

Thanks.
Sean.
 

jrf

Well-Known Member
Aug 19, 2003
58
0
156
Is this an instant SSL from Komodo? I had the same problem the other day, I can find out what was done to solve it if was the same thing?

By the way, it would work fine for me in firefox but not IE.
 

Dr. Bogger

Well-Known Member
Dec 21, 2003
95
0
156
Hello,

Yes, one of the certificates was a Comodo cert. But i also had another one from FreeSSL.com and that one didnt work eather.

But it seems the problem for me was that the whm ssl installer was not entering the feild above into the httpd.conf file.

I seen 2 entres in the cpanel bugzilla about this but with no responce... So I wonder if cpanel know about this issue... Can someone please contact them about this?

Thanks.
 

Peoplespaces

Well-Known Member
Oct 1, 2001
262
6
318
cPanel Access Level
Root Administrator
I believe this is browser specific. You have to choose to trust the certificate supplier in the browser. Thwaite and Verisign are installed by default in IE, but others may not be.
 

Dr. Bogger

Well-Known Member
Dec 21, 2003
95
0
156
Hello,

I seems that the problem was that when you installed a certificate from WHM, it did not add the the following feild: SSLCACertificateFile /usr/share/ssl/certs/yourdomain.cabundle to the httpd.conf file.

This is what I did to fix it:

1. Installed the ssl certificate through WHM.

2. Edit the httpd.conf file and add the following entry into the correct place: SSLCACertificateFile /usr/share/ssl/certs/yourdomain.cabundle.

3. Restart Apache.

Done.

That is what fixed my problem.
 

Dr. Bogger

Well-Known Member
Dec 21, 2003
95
0
156
OMG, thats the exact thing cpanel just said, but it is completely wrong.

This was my email to cpanel:

--------------
This is what I added to httpd.conf file and it works just fine:
SSLCaCertificateFile /usr/share/ssl/certs/yourdomain.com.cabundle

as a matter of fact, I HAVE to add that feild to the httpd.conf file
or ssl will not work properly.

You said it will brake the apache conf file, but it dont for me, and I
dont use apache 2.0. Actualy, It FIXES ssl.
-------------

Now please, someone here has gatta know this.

This is what heppens to ssl if i dont add that feild to the httpd.conf file:



URL to the Image: http://www.sixpointnine.net/ssl.gif
Note: I got this picture of google image search.

That is the same exact error I get if i dont add it, but if I do add it, it goes away. Whats up with that?

The real problem I am having is the Install SSL Certificate Feature in WHM dont add that feild to the httpd.conf file. And because of that, it causes that error.

Please let me know whats going on with this.

Thanks.
 

Host4u2

Well-Known Member
Mar 24, 2002
248
0
316
If I add "SSLCaCertificateFile /usr/share/ssl/certs/mydomain.com.cabundle" (no quotes) to my httpd.conf it causes Apache to fail!!! Why? I'm told again that "This directive is part of Apache2 but not Apache 1.3 which Cpanel supports."
 

Dr. Bogger

Well-Known Member
Dec 21, 2003
95
0
156
Ok, Cpanel just emailed me back, he said "This has been fixed in the edge version."
 

icanectc

Well-Known Member
Mar 10, 2003
344
0
166
flash7 said:
UP

same issue :mad:

IE browser is dead

If you visit the comodogroup's support center it will give you detailed instructions on how to fix the problem. It's a 5sec fix.
 

Dr. Bogger

Well-Known Member
Dec 21, 2003
95
0
156
or you could upgrade cpanel to the latest release... It is fixed in that version ^_^
 

flash7

Well-Known Member
Feb 16, 2004
201
0
166
icanectc said:
What are you talking about?? Your completely wrong. You have to add SSLCACertificeFile to the apache file or you will always get the trust issue.
My cert is for WHM/cPanel

myservername.myhost.foo

soo no need to add any SSLCACertificeFile into httpd.conf

right?


thank you
 

Dr. Bogger

Well-Known Member
Dec 21, 2003
95
0
156
i'm sorry, it was the Current Release. (9.9.0-CURRENT_55). It is fixed in that version.
 

checksoft

Well-Known Member
Mar 16, 2002
67
0
306
Dr. Bogger said:
i'm sorry, it was the Current Release. (9.9.0-CURRENT_55). It is fixed in that version.
I'm up to 9.9.8-STABLE 6 and the SSL function does not work. I installed through cpanel as directed. I end up with a DNS error.

Anybody?