SSL Partially working

Alright, I've been working on this for a few hours, and i'm starting to get a headache. I have the SSL certificate installed, and it is working for xxx.domain.xxx:2031 but it is not working for xxx.domain.xxx. I'm receiving "ERR_SSL_PROTOCOL_ERROR" via the browser. Also, my certificates may be working, but it is not recognizing the chain certificate. I've installed it properly but its still not being recognized. I took a peek at the api file, and noticed the "certificatechain" line was MIA.

https://imgur.com/mc7JaSf

https://imgur.com/hADrDuY

Did you use the AutoSSL module.

CWP.Admin -> webserver settings -> AutoSSL

with xxx.domain.xxx:2031, you need to use the change hostname module - CWP.Admin -> server settings -> change hostname -> enter hostname and click change hostname

Yes, the Hostname is correct.

Alright, after hours of tweaking i'm starting to make some progress with the SSL Issues.

I've found the problem with https://xxx.domain.xxx .

/usr/local/apache/conf.d/hostname-ssl.conf

For some reason the configuration was using the Shared IP, instead of using the Hostname IP. After changing this, SSL is fully operational with no issues.

https://imgur.com/XNz0NGN

The only issues I have now is getting https://xxx.domain.xxx:2031 CertificateChain working. Can you please point me in the proper direction for the configurations for that. i do know its running Nginx on the management side, not very familiar with that webserver.

Alright, after hours of tweaking i'm starting to make some progress with the SSL Issues.

I've found the problem with https://xxx.domain.xxx .

/usr/local/apache/conf.d/hostname-ssl.conf

For some reason the configuration was using the Shared IP, instead of using the Hostname IP. After changing this, SSL is fully operational with no issues.

https://imgur.com/XNz0NGN

The only issues I have now is getting https://xxx.domain.xxx:2031 CertificateChain working. Can you please point me in the proper direction for the configurations for that. i do know its running Nginx on the management side, not very familiar with that webserver.

Alright, issues have been resolved. To get certificates to work properly you need to modify:

/usr/local/cwpsrv/conf/cwpsrv.conf

Code: [Select]

ssl_session_timeout 90m;
        ssl_certificate     /etc/pki/tls/certs/hostname.crt;
        ssl_certificate_key /etc/pki/tls/private/hostname.key;
        ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers         HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers   on;
error_page 497  https://$host:2087$request_uri;

convert the crt to a Pem..
Follow the tutorial from : https://scottlinux.com/2013/09/02/how-to-configure-ssl-certificate-chain-for-nginx/

Now everything is running properly.