Control Web Panel

WebPanel => SSL => Topic started by: emar on July 08, 2024, 04:58:07 PM

Title: NET::ERR_CERT_DATE_INVALID / Your connection is not private
Post by: emar on July 08, 2024, 04:58:07 PM
Hi,

All domain on our CWP server are displaying this message:

Your connection is not private

Attackers might be trying to steal your information from dreamstream.it (for example, passwords, messages or credit cards).

NET::ERR_CERT_DATE_INVALID

Using the free Lets Encrypt,
Tried deleting one cert and install it again, no luck.

Any advice appreciated
Title: Re: NET::ERR_CERT_DATE_INVALID / Your connection is not private
Post by: Starburst on July 08, 2024, 05:54:38 PM
Could you please advise of the following:

What 'errors' and/or 'messages' are being displayed in the logs, not just the screen?

What distro are you are you running CWP on?

CWP Free or CWPpro?

Public or NAT?
Title: Re: NET::ERR_CERT_DATE_INVALID / Your connection is not private
Post by: emar on July 08, 2024, 06:18:43 PM
CentOS Linux release 7.9.2009 (Core)
CWPpro version: 0.9.8.1181
Server IP is public

Which logs do you want to see>?

/var/log/cwp/autossl.log
/root/.acme.sh/acme.sh.log
Title: Re: NET::ERR_CERT_DATE_INVALID / Your connection is not private
Post by: overseer on July 09, 2024, 03:12:42 PM
Yes, those logs would be good. Watch them during a renewal attempt.
Title: Re: NET::ERR_CERT_DATE_INVALID / Your connection is not private
Post by: Starburst on July 09, 2024, 04:24:54 PM
There is also that Let's Encrypt has changed their certificate chain.

@Sandeep also has a thread about it:
https://forum.centos-webpanel.com/ssl/acme-sh-is-now-using-zerossl-change-it-to-letsencrypt-ca-server/ (https://forum.centos-webpanel.com/ssl/acme-sh-is-now-using-zerossl-change-it-to-letsencrypt-ca-server/)
Title: Re: NET::ERR_CERT_DATE_INVALID / Your connection is not private
Post by: emar on July 09, 2024, 04:58:12 PM
I fixed them by renewing some certs, had to remove and reissue some new certs,
Rebooted server and eventually issue was gone.