Unable to install SSL certificate

[technik]

Hello everybody

We're installing/renewing certificates via the installssl API call which has been working for years now. The API still returns ok, but the certificate is not used.

What else I've tried so far:
- Manually via "Install an SSL Certificate on a Domain" by copy&pasting crt, key and intermediate. No errors, but no success either.
- Removed the domain's vhost with the soon expiring certificate via "Manage SSL Hosts"
- Added the new certificate via API. Again no errors, and no success
- When trying to add it with the webinterface, it says the certificate is already present
- The new certificate is listed in the "SSL Storage Manager", but no vhost exists in "Manage SSL Hosts"
- The httpd.conf also shows no vhost for the domain on :443
- In /var/cpanel/ssl/apache_tls/.index.sqlite there seems to be the correct new certificate listed (according to the validity times)
- /scripts/rebuildhttpdconf doesn't fix it, as well as restarting Apache

Running on CloudLinux 7.9 with version 108.0.15

I have not tried it with the other accounts on the todo list yet, because right now I'm unable to add the old certificate either, so the domain is showing a SSL error. Needless to say that I'm not tempted to try another host without knowing the cause.

 

[cPRex]

Hey there! Just to confirm, no matter how you try and configure the SSL, you are not getting a 443 vhost for that domain inside the httpd.conf file directly?

If that's the case, I'd like you to try one more thing. Can you use the WHM >> Generate an SSL Certificate and Signing Request page to create a self-signed certificate, and then see if that creates the 443 vhost?

 

[technik]

Hey there! Just to confirm, no matter how you try and configure the SSL, you are not getting a 443 vhost for that domain inside the httpd.conf file directly?

If that's the case, I'd like you to try one more thing. Can you use the WHM >> Generate an SSL Certificate and Signing Request page to create a self-signed certificate, and then see if that creates the 443 vhost?

Correct.

I created a self-signed certificate and added it via "Install an SSL Certificate on a Domain". No error messages or anything. It's listed in the "SSL Storage Manager", but I don't see a vhost in /etc/apache2/conf/httpd.conf. In "Manage SSL Hosts" there is still no entry for that domain.
All the other domains and their vhosts are still there and working; but like I said, I'd like to figure out the root cause first before renewing the next one.

 

[cPRex]

That's definitely odd behavior - could you create a ticket with our support team so we can do more testing with this issue?

 

[technik]

Ticket is submitted

 

[cPRex]

Could you post the number here so I can follow along?

 

[technik]

95039707

 

[cPRex]

Thanks for that - I'm following along with that now.