My SSL Cert appears to have installed properly but Firefox doesn't like it

Benji Durden

• February 27, 2015 10:47

I bought a new Trustwave and installed everything the same way I did last year using the "Install an SSL Certificate on a Domain". Last year it worked as expected. This year cPanel said everything was fine but Firefox says the site is untrusted "The certificate is not trusted because no issuer chain was provided." I did install the chain.cer. Trustwave says it isn't their fault...it must be me doing it wrong but won't tell what to fix. Any ideas on what to try next. Google hasn't helped. :confused:

• 

  cPanelMichael

  • February 27, 2015 16:50

  Hello :) When using "WHM >> SSL/TLS >> Install an SSL Certificate on a Domain", did you leave the CABundle field blank or paste Trustwave's CABundle in the field? Thank you.

  0
• 

  Benji Durden

  • February 27, 2015 19:11

  ]Hello :) When using "WHM >> SSL/TLS >> Install an SSL Certificate on a Domain", did you leave the CABundle field blank or paste Trustwave's CABundle in the field? Thank you.

  
  I pasted in the Trustwave CABundle (chain.cer) in the field. All of the fields had green check marks by them when I was done. I restarted the apache server...

  0
• 

  cPanelMichael

  • March 03, 2015 14:39

  Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome. Thank you.

  0
• 

  Benji Durden

  • March 04, 2015 00:47

  ]Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome. Thank you.

  
  the ticket is 6181045

  0
• 

  cPanelMichael

  • March 04, 2015 14:03

  To update, it was determined that this issue is associated with internal case number 136457. This case will ensure verification of CA bundles via OpenSSL before accepting the CA bundle for installation. It also adds logic to pick the "best" of multiple (valid) CA bundles. The temporary workaround at this time is to remove the existing SSL certificate completely via "WHM -> Manage SSL Hosts", and then reinstall the SSL certificate with the desired bundle. You can monitor our change log for this case number at: cPanel - Change Log Thank you.

  0

Please sign in to leave a comment.