Hi,
Since this month i have following Problem.
When issue a new LetsEncrypt Cert for a Host i always geht following Error in Domain Status:
iMSCP::OpenSSL::validatePrivateKey: Couldn't import SSL private key from /tmp/BQ5IDDHWm2 file: CN = domain.at error 20 at 0 depth lookup: unable to get local issuer certificate |
I already tried following fix from this Thread LetsEncrypt - SSL certificate is not valid
- cd /usr/share/ca-certificates/mozilla/
- wget https://letsencrypt.org/certs/lets-encrypt-r3.pem
- mv lets-encrypt-r3.pem lets-encrypt-r3.crt
- dpkg-reconfigure ca-certificates # -->> add new letsencrypt Cert
- vi /var/www/imscp/engine/PerlLib/iMSCP/OpenSSL.pm +134 #comment out line 134
- my $cmd = [
- 'openssl', 'verify',
- # ( ( $self->{'ca_bundle_container_path'} ne '' ) ? ( '-CAfile', $self->{'ca_bundle_container_path'} ) : () ),
- '-purpose', 'sslserver', $self->{'certificate_container_path'}
- ];
This solves the issue of creating new valid Letsencrypt certs, i checked them with https://www.sslchecker.com/matcher and they are valid.
But it seems that the hosting panel has somewhere a old cert to validate and afterwards dont deliver the right one to the apache conf.
The backend is working fine, here Letsencrypt works its only not working for customer hosts.
Iam a litte bit desperate at the moment, i hope somebody could help me. Iam also willing to pay for support (e.g. Discordsession) if nessecery.
With kind regards.
