MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Bugs and Requests => Topic started by: chrisf on 2014-04-27, 04:09:26

Title: [IMPORTANT] Apache SSL bug
Post by: chrisf on 2014-04-27, 04:09:26
Mustafa, after recent update Apache (no proxy) started giving SSL not trusted errors.  I tracked the error to this file:

/home/apache/tpl/domains.conf.tpl

Lines 155 and 276 have this code
Code: [Select]

<?php
                                        
if (file_exists("$certname}.ca")) {

You missed a curly bracket '{' before the $... these need changed to:

Code: [Select]

<?php
                                        
if (file_exists("{$certname}.ca")) {

PLEASE fix both of these lines in the repo files, on any fix or cleanup my Apache SSL breaks!

Title: Re: [IMPORTANT] Apache SSL bug
Post by: Joe on 2014-04-27, 04:18:59
I can't delete my old SSL certificate that expired and when I check the trust with the site checker below it now shows the SSL Certificate is not trusted because it can't read the Intermediate certificate.

Please..Please make these SSL issues a priority. Losing customers over these problems so these are not minor bugs.

Here's an online SSL checker/Validator Tool:

http://www.digicert.com/help/

Title: Re: [IMPORTANT] Apache SSL bug
Post by: chrisf on 2014-04-27, 04:27:50
Those 2 lines are for the intermediate certificate file, once mustafa fixes it, or do it yourself for now, run fix web and all will check out. :)

See -
http://www.sslshopper.com/ssl-checker.html#hostname=convictionshosting.com (http://www.sslshopper.com/ssl-checker.html#hostname=convictionshosting.com)
Title: Re: [IMPORTANT] Apache SSL bug
Post by: Joe on 2014-04-27, 05:00:54
Thanks, now if I can figure out why it keeps reading my old expired certificate even though it was deleted through the control panel and the new one added.
Title: Re: [IMPORTANT] Apache SSL bug
Post by: MRatWork on 2014-04-27, 05:27:12
Only affect if using .ca file. Also wrong in other web config template.

Will be fixed immediately.