We are happy to announce that Vesta is back under active development as of 25 February 2024. We are working on v1 candidate and expect to engage more with the community over the coming months. We are committed to open source, and we encourage contributors to help us build the future of Vesta.
root or/and intermediate cerificate not found
root or/and intermediate cerificate not found
When try to add ssl certificate and key on single domain i got error root or/and intermediate cerificate not found. How to fix this?
Re: root or/and intermediate cerificate not found
also, Error: certificate authority not found is got when SSL Certificate Authority / Intermediate (optional) is empty.
Re: root or/and intermediate cerificate not found
There was a bug with OpenSSL that caused this that has been fixed via Vesta patch a while ago. Oddly, I hit the same issue last night though on a new install on CentOS 6.5. I wonder if we're both doing something wrong.
Re: root or/and intermediate cerificate not found
well how to fix this ?jarland wrote:There was a bug with OpenSSL that caused this that has been fixed via Vesta patch a while ago. Oddly, I hit the same issue last night though on a new install on CentOS 6.5. I wonder if we're both doing something wrong.
Re: root or/and intermediate cerificate not found
Sounds to me like your not putting the certificate bundle information into the "optional" field. On previous testing I found that field is in fact not optional it is required. For go daddy it is the gd_bundle.crt which is basically the certifying authority information.
Re: root or/and intermediate cerificate not found
Previous topic on this can be found here: http://forum.vestacp.com/viewtopic.php?f=11&t=4020
Re: root or/and intermediate cerificate not found
You nailed it for me at least. For the OP, I got my SSL at NameCheap, and here's what I was doing...jhewit wrote:Sounds to me like your not putting the certificate bundle information into the "optional" field. On previous testing I found that field is in fact not optional it is required. For go daddy it is the gd_bundle.crt which is basically the certifying authority information.
SSL certificate: jarland_me.crt
SSL key: (the one I made)
SSL CA: AddTrustExternalCARoot.crt
There was my mistake at the end there. SSL CA should've been PositiveSSLCA2.crt. Make sure you're putting the right thing in the right place.
Re: root or/and intermediate cerificate not found
well on startssl.com, when you register for free, go to Select Certificate Purpose, choose Certificate Target: Web Server SSL/TLS , than Generate Private Key and select domain name eg. subdomain.mydomain.tld (this domain passed Validation Wizard process) this key need to be Decrypt ( openssl rsa -in ssl.key -out ssl.key) ... question is: would it really be decrypted when you put all 3. fields in vesta panel?jarland wrote:You nailed it for me at least. For the OP, I got my SSL at NameCheap, and here's what I was doing...jhewit wrote:Sounds to me like your not putting the certificate bundle information into the "optional" field. On previous testing I found that field is in fact not optional it is required. For go daddy it is the gd_bundle.crt which is basically the certifying authority information.
SSL certificate: jarland_me.crt
SSL key: (the one I made)
SSL CA: AddTrustExternalCARoot.crt
There was my mistake at the end there. SSL CA should've been PositiveSSLCA2.crt. Make sure you're putting the right thing in the right place.