VestaCP and self-signed cert

heachhog

Hi Guys,

I have a VestaCP installation running on Ubuntu 14.04 with and some websites for personal use, some domains with SSL and some without. Today I have added a new domain a tried to enable SSL support, using embedded VestaCP CSR Generator. Pasted the output and Vesta shouted at me with "Error: ssl certificate key pair is not valid". CN is correct, cert and keys are a simple copy-paste from another window.

Previously this function worked with no issues. Tried with existing domain (SSL has been enabled before) and got the same result. Google didn't help that much, so I am hoping that you could share some pointers, maybe where I can find debug info.

Thanks in advance!

funyuns_are_awesome

You should translate this page with a translator.

https://forum.vestacp.com/viewtopic.php?t=3575

century1stop

no idea, just did mine w/o issues

desperand

latest version of vestacp very bugged...

Cloudcone

Did you add the CA bundle in proper order?

tzulo

I had issues with Vesta and ended up doing it manually via ssh: https://help.blacknight.com/entries/22940668-How-do-I-generate-CSR-Private-key-pair-via-SSH

dgprasetya

don't merge intermediate cert and crt file from email into SSL Certificate text field. put intermediate or CA file into optional text field.

fyi, you can use free ssl cert from Let's Encrypt https://github.com/diafygi/acme-tiny

heachhog

@funyuns_are_awesome said:

Thanks for the link, I didn't see that one before, so it might help. Language wouldn't be an issue here

@Quadcone said:
Did you add the CA bundle in proper order?

Well, it is a self-signed cert that I am trying to install, so I don't think that there is a CA cert available.

@desperand said:
latest version of vestacp very bugged...

Yes, I think this is the problem, didn't have this issue before. Will try now to generate the certs manually.