CA bundle

sirfpsycho

Hello, I have bought ssl from ssls and I put Private key (KEY) and Certificate (CRT/PEM) in domain>ssl>other certificate.
but while checking ssl status in sslshopper it gives error:
The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate
I contacted ssls and they said to re-install ssl with CA bundle on nginx server. Can you please guide me to reinstall CA bundle on my server? I have downloaded the CA bundle zip.

aaPanel_Kern

sirfpsycho
Hi. Take a screenshot of your file directory for me to see. At the same time, check whether the location is wrong, whether you use cdn, reverse proxy, if you use them, you need to update ssl

sirfpsycho

aaPanel_Kern
yes I use reverse proxy. Here is the path of ssl in my domain config in reverse proxy server:
ssl_certificate /www/server/panel/vhost/cert/domain.com/fullchain.pem;
ssl_certificate_key /www/server/panel/vhost/cert/domain.com/privkey.pem;

here domain.com is an example.

aaPanel_Kern

sirfpsycho
It's not about the configuration, it's about whether the Private key of the Other certificate is reversed with the Certificate

sirfpsycho

aaPanel_Kern
so what should I show you here to investigate?

aaPanel_Kern

sirfpsycho
screenshot. Didn't it let you screenshot the file directory?

sirfpsycho

aaPanel_Kern
https://prnt.sc/1G_2oklILYIA

aaPanel_Kern

sirfpsycho
This appears normal. Is this configured on the proxy server? Is it normal to try to use private mode access?

sirfpsycho

aaPanel_Kern
yes it is in reverse proxy server. I have added nginx_bundle.crt in /www/server/panel/vhost/cert/domain.com
and removed the line from domain config:
ssl_certificate /www/server/panel/vhost/cert/domain.com/fullchain.pem;

and added line:
ssl_certificate /www/server/panel/vhost/cert/domain.com/nginx_bundle.crt;

and now it doesn't show any error in sslshopper.
Is it the right way? lets encrypt ssl doesn't give any error but bought ssl from sls website gave issue at sslshopper.
Removing fullchain.pem will cause any issue?

aaPanel_Kern

sirfpsycho
It's fine as long as the ssl content is correct. It is not recommended to change the configuration file directly