Dear, I'm using the latest ISPConfig 3.1.1p1 on an Ubuntu 14.04 LTS system with Apache. When I try to configure an SSL certificate, I input the SSL Key, SSL Certificate and SSL Bundle. Now the SSLCertificateFile and SSLCertificateKeyFile files are generated, but not the SSLCACertificateFile. Offcourse I receive SSL chain errors in browsers and SSL validation tools. Is this a know problem/bug? Am I doing something wrong? Kind regards, Burn
The .crt and .key are indeed generated in the "ssl/" folder as it should. But no ssl_bundle file. ISPconfig doesn't write the SSLCertificateChain parameter to the vhost file + it doesn't write it to disk. Any clue where this goes wrong? FYI: this server is running Apache 2.4.7. The certificate is a wildcard certificate. In this case it's assigned to 1 particular subdomain I create as a website.
In the ISPconfig.log file I spot this kinda line when I'm trying to save the SSL cert: Code: 25.11.2016-14:44 - WARNING - Action aborted, file is a symlink:
Yes --> /var/www/subdomain.domain.tld -> /var/www/clients/client1/web1/ How is it different for creating the bundle file vs. the other certificate files?
Sjau meant if there are any symlinks in this path: /var/www/clients/client1/web1/ and not if symlinks are pointing to /var/www/clients/client1/web1/
That's probably an issue in ispconfig due to the changed ssl cert handling in 3.1.1. I've added a bugreport for that.