My domain is: mielbio.fr My web server is (include version): Apache 2.4.6 The operating system my web server runs on is (include version): CentOS 7.9 I can login to a root shell on my machine : Yes I'm using a control panel to manage my site : Webmin/Virtualmin Hello, until yesterday everythin…

[ssl1] Webmin configuration for mielbio.fr Same thing for apiculture-bio.fr

There you see your problem. That's not the new R3 certificate, that's the old intermediate you use. So that can't work with a new created certificate, the error is expected. PS: apiculture-formation.com has the old certificate, so that's correct.

Dear Jürgen, I am sorry that I cannot see what You see. I guess that probably all my other certificates might not work anymore too when they are renewed ? Please tell me what I have to do to fix that. Thank You very much.

Replace the ssl.ca file (shown in the image in your previous post) with this file: https://letsencrypt.org/certs/lets-encrypt-r3-cross-signed.pem It is the correct CA intermediate certificate for newly issued Let's Encrypt certificates. This is the old one, which you are currently using: https:/…

Also, if you're using an up-to-date version of Webmin, consider letting the Webmin developers know that they seem to have hard-coded the old intermediate certificate, or at least that they're apparently not properly handling changes in the intermediate certificate (such as the one that took place re…

[image] Lets Encrypt certificates are broken [#70318] | Virtualmin Let's Encrypt has a new CA cert file https://www.virtualmin.com/node/70318 committed 09:30PM - 08 Dec 20 UTC (UTC) …

So fullchain (via SSLCertificateChainFile) appears to be deprecated in apache... :thinking: The files may also include intermediate CA certificates, sorted from leaf to root. This is supported with version 2.4.8 and later, and obsoletes SSLCertificateChainFile. https://httpd.apache.org/docs/2.4/…

The Apache docs can claim it is deprecated, but until CentOS 7 EOL (July 2024) it won't really be the case. :sob:

[image] Bousquet: Apache 2.4.6 knows nothing of the deprecation.

Chain missing or incomplete

Help

rg305 December 15, 2020, 11:48pm 13

Verification failing after last renewal - Help - Let's Encrypt Community Support

mod_ssl - Apache HTTP Server Version 2.4

Topic		Replies	Views
Incomplete, Extra intermediate chain certificate Help	9	2950	December 30, 2020
[Solved] Why isn't my certificate trusted? Server	21	79696	February 9, 2017
Certificate OK but bank problem "unable to get local issuer certificate" Help	8	1923	October 22, 2019
Certificate chain incomplete Help	3	1489	December 22, 2021
NET::ERR_CERT_AUTHORITY_INVALID error on my website Help	30	40251	March 13, 2018

Chain missing or incomplete

Related topics