Installed wrong ssl cert

hi all,

ive installed passbolt CE on my ubuntu 24.04 VM and ive setup the wrong ssl cert and trying to regenerate it again, im running this command to regenerate

dpkg-reconfigure passbolt-ce-server

i say “no” to configure db and “yes” to configure nginx i then type in my domain and then my ssl crt and key but all the time i change this when i go to my website i get issuer name “quick web proxy”

am i doing something wrong please

thanks,
rob

ok my issuer is still “quick web proxy” but under “SSL cert” under “passbolt api status”

so all good now, just had to add my FQDN in the “/etc/hosts” file so it could resolve itself

can anyone please help why my issuer is still showing up as “quick web proxy”?

thanks,
rob

Hello @robert.wild,

When you’re mentioning the certificate issuer name, do you mean from your browser point of view?

Cheers,
Gérold.

hi @Gerold i know our issuer is sectigo who do our wildcard certs but when i click on the padlock on the website next to the URL bar and click on “connection secure” it says verified by “quick web proxy” normally when i install ssl certs it says issuer by “sectigo”

@robert.wild It’s probably because your SSL certificate is kept in your browser cache, C
could you please try to clear this cache?

@Gerold this is very weird as now its working, i have firefox auto delete cache/cookies when i close firefox (even tried on chrome edge)

it now states the issuer as “sectigo” ie who issued my ssl cert

just to confirm the fullchain.pem what im using atm which works is in this order

cat STAR_domain_com.crt STAR_domain_com.ca-bundle > STAR_domain_com.fullchain.pem

ie
domain cert (crt)
int cert (ca bundle)
root ca cert (ca bundle)

is that the right order?

thanks,
rob

@robert.wild Yes this should be the right order :slight_smile:

2 Likes