Manage Site SSL Certificate - Not Allowing Intermediate CA

Submitted by xtremeservices on Thu, 08/30/2012 - 16:02

Hi Guys,

I am still using Virtualmin 3.93 PRO so I am not sure if this is fixed in 3.94.

In the Virtual Server -> Manage Server -> Manage SSL Certificate -> New Certificate tab, the manual text entry for a new Certificate does not seem to like tagging on the Intermediate CA.

The error I am getting is :

Failed to install certificate : Missing or invalid signed SSL certificate : Line 30 does not look like PEM format

The current solution I found was to place both the certificate and the intermediate into a .pem file and upload it.

Hope you guys have a great day,

~Jeremy

Status: 
Closed (fixed)

Comments

Submitted by JamieCameron on Thu, 08/30/2012 - 18:10

What is on line 30 of the file you are trying to upload?

Submitted by xtremeservices on Thu, 08/30/2012 - 18:23

Hi Jamie,

That is what is even more bizarre, Line 30 Is the line just before the -----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

This only throws an error if the Intermediate CA is appended as shown above.

~Jeremy

Submitted by JamieCameron on Thu, 08/30/2012 - 18:46

Ok, I see the issue - your file contains multiple certs, but Virtualmin is incorrectly only allowing one.

I will fix that in the next Virtualmin release. The manual work-around would be to enter just the first cert, then edit the file etc/ssl.ca under the domains home directory and add the second cert. Then restart Apache.

Submitted by Issues on Thu, 09/13/2012 - 18:51

Automatically closed -- issue fixed for 2 weeks with no activity.