The one place for your designs
To enable design management, you'll need to meet the requirements. If you need help, reach out to our support team for assistance.
Websites UI / Let's Encrypt :: add Option to allow switching to fullchain.pem in favor of chain.pem
ISPC 3.1.3
Currently we had multiple customers on Mac OS (latest: Mac OS Sierra Vers. 10.12.4.- Safari Vers. 10.1.) that cannot connect to Let's Encrypt protected Domains. A little search reveals it is an known issue of lets encrypt and - apparently - an simple fix for it. Simply the use of the LE given fullchain.pem instead of the chain.pem.
A) seems to fix the problem in every case. b) seems not to interfere with other Users (OS/Browser)
Solution was as follows:
- create in symlink to the fullchain-pem in the clients-ssl folder:
/var/www/clients/clientX/webY/ssl/domain.example.com.pem -> /etc/letsencrypt/live/domain.example.com/fullchain.pem - Inserting the new link as directive over the Interface overwriting in fact the default cert-Declaration.
Unfortunately the symlinks in the clients subfolder are not offering an link to the fullchain by default.
In fact the usage of chain.pem is nothring wrong, but faced with compatibility issue it seems maybe an good solution to add an option for that in an by page level.