StartSSL problem

19 posts / 0 new
Last post
#1 Fri, 06/19/2015 - 14:19
smccloud

StartSSL problem

Hi,

I am trying to get my free StartSSL certificate working properly for my domain. It works for the associated subdomain without issue. I have also chained their root ca & class 1 server ca. So far nothing has worked. Does anyone have any suggestions? Anything else you need to help me with this issue?

Sun, 06/21/2015 - 07:15
Philip B
Philip B's picture

Hi,

I use a Start SSL certificate on Virtualmin and it works fine. I use the sub-domain for my mailserver. Did you install using Virtualmin or via SSH? It sounds like a configuration problem or a problem with installation. Have you deleted and tried again? Which web server are you using?

Mon, 06/22/2015 - 13:12
smccloud

I started out with the same certificates that were working under VestaCP (which I left due to its horrible IPv6 support). I'm 99.999999% sure I didn't make a mistake applying the certificates, and I did use Virtualmin and not SSH to do it.

Tue, 06/23/2015 - 13:00
Philip B
Philip B's picture

Try contacting START to see if they can suggest anything. I contacted them a while back as my certificate was showing in Chrome as using obsolete cryptography. They were extremely helpful and helped me resolve the problem even though I had a free SSL.

Turned out it was the SSL scanner in Bitdefender (on my desktop) that was the problem (how embarrassing!)

Tue, 06/23/2015 - 13:20
smccloud

I just contacted them. I do not think it is something like that on my end since I have the problem at work & at home before & after I install Avira.

Tue, 06/23/2015 - 14:23
smccloud

I got "Our certificate isn't seem to be installed on your server [1], please consult your system administrator/hosting provider on how to do that. You can general manuals here [2]." And if I view the certificate info it says it is signed by smccloud.com. I.e. seems to be using a self signed certificate even though I have told it to use a signed one. I'm getting frustrated since I have done everything according to the directions and it should work.

Tue, 06/23/2015 - 15:02
andreychek

Howdy,

Would it be possible for you to share the domain that you're trying to get working with us?

You can always remove it from the post after we get it working.

Once we see the domain, it may be more clear what the issue you're experiencing is.

-Eric

Tue, 06/23/2015 - 15:25
Tue, 06/23/2015 - 15:50
Philip B
Philip B's picture

Just had a look and like you said it is showing a self-signed certificate. I can't have installed properly.

Did you upload the certificate and private key in virtualmin or use the cut and paste function? If it was me I would delete the the ssl.key, ssl,cert and ssl.ca from smccloud directory (I think this will gerate another self-signed). Then try a fresh install.

Tue, 06/23/2015 - 15:50
Philip B
Philip B's picture

Just had a look and like you said it is showing a self-signed certificate. It can't have installed properly.

Did you upload the certificate and private key in virtualmin or use the cut and paste function? If it was me I would delete the the ssl.key, ssl,cert and ssl.ca from smccloud directory (I think this will gerate another self-signed). Then try a fresh install.

Tue, 06/23/2015 - 16:01
smccloud

I used the cut & paste function.

I just deleted the ssl.key, ssl.cert & ssl.ca files. Applied them again and I am still getting the same issue. I am running out of ideas, although it isn't a huge deal since it just use encryption on my backend right now I would like to enable it site wide.

Wed, 06/24/2015 - 07:20
Philip B
Philip B's picture

I am running out of ideas as well. The only other thing to try is to delete the files again and install them via SSH/SFTP. If this does not work it would rule out your Virtualmin installation/configuration being the problem.

Wed, 06/24/2015 - 07:55
smccloud

Well,

Just installed the certs via SSH and that didn't fix it either.

Wed, 06/24/2015 - 11:53
Diabolico
Diabolico's picture

I know this is not best advice but if you go www.ssls.com or www.gogetssl.com you can buy basic SSL for 3-4$ from well know SSL providers. For few bucks is worth a try and probably you will get better support than from StartSSL.

- I often come to the conclusion that my brain has too many tabs open. -
Failing at desktop publishing & graphic design since 1994.

Wed, 06/24/2015 - 12:01
smccloud

Probably going to go with https://www.ssls.com/ssl-certificates/comodo-positivessl Just wish I could add mail.smccloud.com in for the same price.

Wed, 06/24/2015 - 12:13
Diabolico
Diabolico's picture

If you need now SSL then just buy for one domain and wait for http://www.virtualmin.com/node/36941.

- I often come to the conclusion that my brain has too many tabs open. -
Failing at desktop publishing & graphic design since 1994.

Wed, 06/24/2015 - 14:22
smccloud

1 year should be plenty of time to let the Virtualmin staff get Let's Protect working right?

Wed, 06/24/2015 - 18:21
Diabolico
Diabolico's picture

By my point of view anything more than 30 days for things like this is already too much. I'm following some other forums and hosting providers and they will not wait for too long for implementation into cPanel. If cPanel gets lazy probably someone else will quickly jump in with addon for that control panel. Actually too many people are waiting for this, its a big thing so i hope Vmin will be ready to jump in when it go live.

- I often come to the conclusion that my brain has too many tabs open. -
Failing at desktop publishing & graphic design since 1994.

Wed, 06/24/2015 - 20:39
smccloud

Yeah, but it won't be released until September.

Topic locked