Just installed my new GeoTrust certificates on an Alabanza server. I am a reseller and don't have root access, so installed through the Alabanza control panel. I've checked and double-checked my installation, don't see where I could have screwed this up. I called GeoTrust, who said it looks like the CA cert is not installed.

Please have a look at the error message and tell me what you think:

https://tmxnet.com/exchange/index.html

Thanks,
-Bob

The GeoTrust certificates require that you also install a rootchain certificate. When you received your certificate from GeoTrust you should have received two encrypted certificates. One is the webserver certificate for your domain and the other is the rootchain certificate. It looks like the rootchain certificate (CA) has not been installed like GeoTrust said.

Do you have anything on your Alabanza control panel that says anything about installing a CA certificate or a rootchain certificate?

Richard

Originally posted by Noldar
It looks like the rootchain certificate (CA) has not been installed like GeoTrust said.

Do you have anything on your Alabanza control panel that says anything about installing a CA certificate or a rootchain certificate?


Yes, the control panel takes you to a form with two windows for inputting the certificate info. The first is for my rsa key and web server certificate, and the second is for the rootchain certificate.

Initially, I was careless and installed the two certificates vice-versa. I have since re-installed them in their correct locations, but the problem persists.

Is it possible that initially reversing the certificates could have caused a problem that would require a manual fix?

Thanks,
-Bob

I'm not familiar with the Alabanza control panel, but what it probably does is upload the certificates to a file on the server and then adds the proper statements in your httpd.conf pointing to the certificate files. So I guess it's possible that things may have gotten crossed up.

Can you restart apache from the control panel? After you install an SSL cert apache needs to be restarted. Maybe it just hasn't reread it's configuration.

You may just have to contact Alabanza. Sorry I couldn't be more help.

Richard

Originally posted by Noldar
I'm not familiar with the Alabanza control panel, but what it probably does is upload the certificates to a file on the server and then adds the proper statements in your httpd.conf pointing to the certificate files.

I believe that is in fact how it works. I did a little poking around (within the constraints of my shell access), and found that the web server cert did install, but the rootchain certificate did not.

About rootchain certificates - are these "global" certificates, and not specific to any one site? if so, I think I may have gained some insight as to what's going on here.

Can you restart apache from the control panel? After you install an SSL cert apache needs to be restarted.

Can't do it from the control panel, and am unsure if Alabanza's software does this automatically as part of the certificate install. I haven't tried from the command line, but probably shouldn't.

You may just have to contact Alabanza. Sorry I couldn't be more help.

I fired a note off to both Alabanza and my host a little while ago, so we'll see what happens. I do appreciate your help - when you're at the lower end of the learning curve as I am, every little bit of information is another step forward :)

-Bob