Webmin certificate sometimes untrusted

Server
1

Hi,
I’ve got a ssl certificate for my domain, it always works fine when using Apache (default SSL port 443). I use the same domain/certificate for Webmin, which runs on port 8080 in SSL mode.
The Apache site works fine, chrome shows trusted connection: < img src="//cdck-file-uploads-global.s3.dualstack.us-west-2.amazonaws.com/letsencrypt/original/2X/0/0181d884ce6eff849a9c05c2a85de0fede916592.jpg" width=“690” height=“309”>

While webmin often shows invalid certificate authority: < img src="//cdck-file-uploads-global.s3.dualstack.us-west-2.amazonaws.com/letsencrypt/original/2X/f/fe974f281fd0c7084cbea15d107e69d61926599d.jpg" width=“437” height=“500”>

But sometimes it works: < img src="//cdck-file-uploads-global.s3.dualstack.us-west-2.amazonaws.com/letsencrypt/original/2X/e/e0bb70bbf3b050d33c042f2f5b2882d379dbf9de.jpg" width=“690” height=“284”>

Webmin configuration:

How to fix this?

2

It’s missing the intermediate certificate. But you already specify fullchain.pem, so that should be OK… Somehow it isn’t, but I don’t know anything about Webmin, so I don’t know why either.

3

You could use this guide, but change the DigiCert-parts with their Let’s Encrypt equivalents: https://www.digicert.com/ssl-certificate-installation-webmin.htm

Apparently, Webmin sucks and needs weird methods to work with an intermediate certificate.

You could try to concatenate privkey.pem and cert.pem to a single file and use that file as the “Private key file” in Webmin and add chain.pem to that other option? I dunno, but it’s worth a try :stuck_out_tongue:

4

Do you know any alternatives / better administration panels that handle SSL/Letsencrypt properly?