The Planet Forums > GeoTrust Certificate Install Error Using cPanel

Full Version: GeoTrust Certificate Install Error Using cPanel

The Planet Forums > Control Panels > cPanel/WHM

tazdeveloper

Feb 14 2004, 03:21 PM

I have read a ton of posts, but have not found an answer to my problem.

I just ordered a cert through RS using WHM to make the CSR for requesting the certificate. The entire process up to the install went quite smooth.

I paste the appropriate files into the WHM panels, and receive the following error:

Attempting to verify your certificate.....
2193:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:662:Expecting: CERTIFICATE
Sorry the Certificate has a problem

I checked the pastes and made sure there was no extra spaces. I tried it several times with different approaches. No Luck!

After several attempts I decided to use the pasted files to follow the instructions listed at:

http://www.ev1servers.net/english/support/...che_mod_ssl.htm

I had no luck with this either.

The worst part is the few posts that might have helped me, the user just says a one liner that I got it to work without placing an explanation.

Additional Information:
My Domain has its own IP address. I am not trying anything funky.

Help! Please!

tazdeveloper

Feb 14 2004, 04:40 PM

I found the answer on cPanels forums. I am using Windows XP and Outlook. Someone noticed that the email with the key is changed from it's original state using Outlook.

Paste the key into Notepad first and fix it before trying to load it.

I have posted Allergy's simple but most effective post below.

Cheers,
TazDeveloper

Hope this helps someone else from going through the misery of the cert not working:

============================================

Hello,

Open your Certificate and Key in Notepad, then delete spaces and new lines between strings and then add new lines. And try again.

cPanel.net Support Ticket Number:

__________________
Allergy

============================================

GetWired

Feb 16 2004, 12:34 AM

I had the SAME exact problem, and I had to do more then paste it in notepad.

If all else fails, post here and i'll find the steps I used and post how to fix it.

ajralston

Apr 8 2004, 05:11 PM

This suggestion did work for me. I also performed these steps from an excellent post by aussie:

QUOTE

I struggled with cleaning up the absolute mess that SSL manager makes out of installing something that should be a no brainer, SSL CERTS. Have you looked at your SSL Manager in WHM listing lately? Do you know which certs are current and which are not? Are you seeing certs with the extension TEST and OLD? Not only that, my GeoTrust and FREESSL cert didn't install thru the SSL Manager GUI. It just gave me one problem after another for about 3 days and still it would't install properly from the GUI.

The only way to clean up the mess is to clean up SSL Manager. Every cert should only have 3 certs and possibily a cabundle and it should appear on ONE LINE, not speard out across zillions of lines displaying OLD and unused certs. I cleaned mine up. Now I have 3 certs displayed on one line and 3 cabundle files and thats iit . You dont need to see anything more.

The only way to install certs is manually! Ahmen!

HOW TO CLEAN UP THE MESS!

su to your box

Open up WHM & SSL MANAGER on the box your going to clean up.

Your certs are stored in a directory called

/usr/share/ssl/certs

Go into that directory:

cd /usr/share/ssl/certs

The only files you need in this directory are

ftpd-dsa.pem -> /etc/ftpd-dsa.pem
ftpd-rsa.pem -> /etc/ftpd-rsa.pem
imapd.pem
ipop3d.pem
dummy-cert
Makefile
srv08.primenet.cc.cabundle -- My state of authority cert
srv08.primenet.cc.crt -- My signed certificate
srv08.primenet.cc.csr -- My CSR

Nothing else!

Everthing else should be REMOVED WITH CARE.

Go into your private key directory

cd /usr/share/ssl/private

Again, the only files you need in this directory are:

ftpd-dhparam.pem -> /etc/ftpd-dhparam.pem
ftpd-dsa-key.pem -> /etc/ftpd-dsa-key.pem
ftpd-rsa-key.pem -> /etc/ftpd-rsa-key.pem
srv08.primenet.cc.key -- My private key.

Nothing else.

Everthing else should be removed with care.

In WHM simply REFRESH your screen. Clean as a whistle.

For the full post see here:
http://forum.ev1servers.net/showthread.php...sl+and+geotrust

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.