AutoSSL: Certificate verification failed
Updating certificates with AutoSSL generates a couple of hundred error like this, until finally giving up:
"
8:19:12 AM WARN Certificate verification failed! Certificate verified: stdin: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority error 20 at 2 depth lookup:unable to get local issuer certificate
"
We have several versions of openSSL installed:
# openssl version
OpenSSL 1.0.2j 26 Sep 2016
# rpm -qa | grep openssl
openssl-1.0.1e-48.el6_8.3.x86_64
openssl-devel-1.0.1e-48.el6_8.3.x86_64
I have read that this might be causing problems, but I cannot remove our newer version of openSSL - is there any way to get AutoSSL to work?
What happens if I delete CPanels preferred version of openSSL so there is only one left, will other parts of the system break then? Can I somehow force CPanel/WHM to use the old version?
Support Request ID is: 8151305
-
I got back word from cpanel-support, saying it is impossible for WHM to work correctly with newer versions of openSSL. You need to: 1, Move the newer openSSL to /opt/openssl 2, Roll back openSSL to the old version installed by RPM 3, Rebuild everything that need a modern openSSL to look at: /opt/openssl 0
Please sign in to leave a comment.
Comments
1 comment