[Case 192121] Certificate bundle verification failed

sehh

• June 22, 2015 14:41

I'm trying to install a wildcard certificate issued by CACERT.org, for all WHM/cpanel services (cPanel/WHM/Dovecot/Exim). I copy paste the CRT file, the KEY file and the Class 3 bundle. I see all three boxes with a green checkmark and I click on the "Install" button. Then I get the following error (same error for each service, I'm pasting the last one, which is for the FTP server):
The SSL certificate update failed. FTP Server Certificate bundle verification failed! Verification Result [ stdin: O = CAcert Inc., OU = http://www.CAcert.org, CN = CAcert Class 3 Root error 20 at 0 depth lookup:unable to get local issuer certificate ]
Any suggestions please? PS: I tried adding a normal certificate issued by GoDaddy and that worked fine.

• 

  madmanmachines

  • June 22, 2015 21:59

  I have seen this issue as few times in the past and the fault was with the SSL Issuer and their intermediate certificate. I would contact your SSL Issuer's support as a first step.

  0
• 

  sehh

  • June 24, 2015 16:22

  I don't think so, because the same certificate works fine on the "old" server. But now that you mention it I'll go check it anyway.

  0
• 

  cPanelMichael

  • July 02, 2015 17:19

  Hello :) 1. A valid chain is required to install a non-self signed certificate in cPanel version 11.50. This prevents an issue where the certificate installation succeeds but browsers such as Firefox show the "Untrusted" warning message. Internal case number 192121 is open to address the issue by improving the error message for a missing cabundle during the SSL installation. 2. Also, if anyone else is experiencing this issue with a different SSL provider, could you please verify the full URL where you obtained the CA bundle? Thank you.

  0
• 

  cPanelMichael

  • July 02, 2015 18:30

  Hello :) Cases 198033 and 198025 were opened to add the cacert.org and GeoTrust Global CA intermediate certs to cabundle.cpanel.net so these fields will populate automatically and the SSL installation won't fail when utilizing those specific CA Bundles. Thank you.

  0
• 

  rains

  • November 04, 2015 07:37

  Cases 198033 and 198025 were opened to add the cacert.org and GeoTrust Global CA intermediate certs to cabundle.cpanel.net so these fields will populate automatically and the SSL installation won't fail when utilizing those specific CA Bundles.

  
  Dear Support, I still see this error:
  Certificate bundle verification failed! Verification Result [ stdin: O = CAcert Inc., OU = http://www.CAcert.org, CN = CAcert Class 3 Root error 20 at 0 depth lookup:unable to get local issuer certificate ]
  On a WHM 11.52.0 (build 21) Can you please elaborate on how this can be resolved? Many thanks, Richard

  0
• 

  cPanelMichael

  • November 10, 2015 19:58

  I still see this error:

  
  Could you verify the exact steps you are taking to reproduce the issue, in addition to what fields you are populating when installing the certificate? Thank you.

  0

Please sign in to leave a comment.