Thursday, July 3, 2008

SSL Error - CA Root certificate is not trusted

RapidSSL certificate was installed on host (e.g. test.servername.com)

But, while browsing Certificate Status was showing
"This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store. "

Fix:-

1)) Find the SSL virtual host entry for test.servername.com
You will find entries such as

SSLEngine on
SSLCertificateFile /usr/share/ssl/certs/test.servername.com.crt
SSLCertificateKeyFile /usr/share/ssl/private/test.servername.com.key
SSLCACertificateFile /usr/share/ssl/certs/test.servername.com.cabundle

2) cat /var/cpanel/ssl/cpanel/mycpanel.pem

3) .crt , .key , .cabundle contents of above paths should match with the /var/cpanel/ssl/cpanel/mycpanel.pem file


Note:

SSL certificates are located at:
– /var/cpanel/ssl/cpanel/cpanel.pem (self-signed)
– /var/cpanel/ssl/cpanel/mycpanel.pem (signed)

No comments: