SSL Bundle doesn't generate SSLCertificateChain

Discussion in 'General' started by burn, Nov 24, 2016.

  1. burn

    burn New Member

    Dear,
    I'm using the latest ISPConfig 3.1.1p1 on an Ubuntu 14.04 LTS system with Apache.
    When I try to configure an SSL certificate, I input the SSL Key, SSL Certificate and SSL Bundle. Now the SSLCertificateFile and SSLCertificateKeyFile files are generated, but not the SSLCACertificateFile. Offcourse I receive SSL chain errors in browsers and SSL validation tools.
    Is this a know problem/bug? Am I doing something wrong?

    Kind regards,
    Burn
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Ensure that you select "Save certificate" as action on the ssl tab and then press the save button.
     
  3. burn

    burn New Member

    The .crt and .key are indeed generated in the "ssl/" folder as it should. But no ssl_bundle file. :(
    ISPconfig doesn't write the SSLCertificateChain parameter to the vhost file + it doesn't write it to disk. Any clue where this goes wrong?
    FYI: this server is running Apache 2.4.7. The certificate is a wildcard certificate. In this case it's assigned to 1 particular subdomain I create as a website.
     
  4. burn

    burn New Member

    In the ISPconfig.log file I spot this kinda line when I'm trying to save the SSL cert:
    Code:
    25.11.2016-14:44 - WARNING - Action aborted, file is a symlink:
     
  5. sjau

    sjau Local Meanie Moderator

    Then check your folder: /var/www/domain.tld/ssl
     
  6. burn

    burn New Member

    There's only 1 .crt and 1 .key file I'm afraid. Both containing only 1 certificate ...
     
  7. sjau

    sjau Local Meanie Moderator

    and are those symlinks?
     
  8. burn

    burn New Member

    Yes --> /var/www/subdomain.domain.tld -> /var/www/clients/client1/web1/
    How is it different for creating the bundle file vs. the other certificate files?
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    Sjau meant if there are any symlinks in this path:

    /var/www/clients/client1/web1/

    and not if symlinks are pointing to /var/www/clients/client1/web1/
     
  10. burn

    burn New Member

    Hi, there are indeed no symlinks in that path. Any idea why that log entry shows up?
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    That's probably an issue in ispconfig due to the changed ssl cert handling in 3.1.1. I've added a bugreport for that.
     
    burn likes this.
  12. burn

    burn New Member

    Super!
    Anything I can do/test?
     
  13. burn

    burn New Member

    till likes this.

Share This Page