Two Cpanel servers, same issue
I'm trying to install Cpanel issued Server SSL certificates.
Both servers are getting this issue:
Certificate verification failed! The system did not find the Certificate Authority Bundle that matches this certificate. Contact “cPanel, LLC” to obtain the Certificate Authority Bundle for “cPanel ECC Domain Validation Secure Server CA 3”.
Certificate and Private Key boxes are populated.
Certificate Authority bundle has this message: CA Bundle #1: The system could not parse the certificate because of an error: Ignoring non-RSA key of type id-ecPublicKey
If I delete the message the server does not retrieve the CA bundle from the public repository.
Where an I download the CA bundle?
-
Hey there! When you say "cPanel issued" can you get me more details on that? Is this a certificate you purchased through the interface or was this issued by AutoSSL?
0 -
Autossl through WHM interface, shows issuer as CPanel.
0 -
Why is my reply pending approval since 2 days ago? I have two servers with Cpanel licences. One through Leaseweb and the other through Eukhost.
0 -
Alfaman - the Forums aren't monitored over the weekend, so it didn't get approved until this morning.
Could you submit a ticket on this? I don't understand why an AutoSSL certificate needs to be "installed" since that entire process is automated. Are you trying to install an AutoSSL certificate on a different domain maybe?
0 -
It's the Cpanel issued certificate for the server domain, for example server.cpanel.com.
I'll open a ticket, I've got the same issues on two servers.
0 -
If you can post the ticket number here I'd be happy to follow along!
0 -
I'd really appreciate your help, as the support I've received via the ticket so far is non existent.
Ticket: 95435779
0 -
Thanks for linking that ticket number. Your OS is too old to properly validate new SSL certificates, which is why it can't be issued. Your version of cPanel has been end of life since November 2020.
The only way to properly fix this would be to have your hosting provider update the machine.
0 -
Hi, cPRex.
It's really so difficult for cPanel support to paste the new CA Bundle in plain text so the ancient servers still not migrated could be working with SSL for another year?
Regards,
0 -
I'm confused about what the CA bundle would have to do with the SSL renewal process. Is the SSLs can't be generated, the CA Bundle likely isn't going to help.
The root certificate is the same for all domains as they all eventually go to the "ISRG ROOT X1" certificate, good until 2035.
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----Is that what you're looking for?
0 -
Hi cPRex. Thanks for your reply, but this is not what I'm looking for as this is for ISRG ROOT X1.
I'm trying to use a certificate issued by "cPanel ECC Domain Validation Secure Server CA 3, cPanel, LLC" for my old server. This certificate is generated by /usr/local/cpanel/bin/checkallsslcerts command, but as I'm on an ancient version, the latest part of downloading CA Bundle certificate from repository, fails. Nevertheless, the certificate is available if I use the Change Service SSL Host option in WHM, but I need to paste the forementioned "cPanel ECC Domain Validation Secure Server CA 3, cPanel, LLC" certificate.
0
Please sign in to leave a comment.
Comments
11 comments