Incomplete Chain Issue, Plesk 11.5 Apache 2.2.15

Help
1

I have Plesk 11.5 so don’t have the option to upload the chain file separately.
If (for the certificate) I upload the fullchain.pem or paste in the text I only end up with the first part
My cert is working but has an incomplete chain according to ssllabs (and is not trusted by Firefox)

I have tried adding
SSLCertificateFile /etc/letsencrypt/live/mydomain.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/mydomain.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/mydomain.com/chain.pem

To the following file but it prevents httpd service from restarting successfully
/var/www/vhosts/system/mydomain.com/conf/vhost_ssl.conf

Any help much appreciated

Plesk 11.5, Apache 2.2.25, Centos 6.9 (I know this server needs retiring but that’s a job for another day!)
It’s my dedicated server, hosting multiple sites. I have root access over SSH

2

Hi,

Can you please follow the two tutorial below and try to install the cert again? (I think you just need to upload the certificate and CA certificate separately)

https://help.fasthosts.co.uk/app/answers/detail/a_id/1981/~/adding-an-ssl-certificate-to-plesk-11/

Thank you.

3

Thanks for the quick response, where would I get the CA cert from?
I have the private key & certificate installed OK

4

Good morning,

The CA file is just your Intermediate and Root CA key.

A good tool to compile it is
https://tools.keycdn.com/certificate-chain

Don’t forget to remove your certificate (server cert) before save the chain to CA cert file.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.