Error "Сonnection is not secure NET::ERR_CERT_AUTHORITY_INVALID" when opening ispmanager 6
Symptoms
When attempting to access the control panel, the following error messages are displayed: NET::ERR_CERT_AUTHORITY_INVALID
or SSL_ERROR_BAD_CERT_DOMAIN
.
Errors may be accompanied by the following warning messages: “Unable to establish a secure connection”, “Potential security risk”, or “Your connection is not private”.
Causes
The panel address has an incorrect or invalid certificate installed.
Solution
Ignore the warning message
In case such warning appears when you log into the control panel, you may safely ignore it, since it relates to the use of a certificate generated locally on the server during installation. Browsers consider such a certificate to be unverified.
To skip the warning message, click the "Additional information" or "Details" button, and then click "Continue", "Make an exception for this site", or "Accept the risk and continue". The names of the buttons may vary depending on the browser in use. However, the functionality and meaning of the buttons will remain consistent.
Install the certificate for the panel address
PLEASE NOTE!
A secure connection for the panel can only be established under the "root" user.
Setting up secure login by domain and port
A certificate for the panel address can be installed using one of the sites created in the panel, in accordance with the instructions set out in our documentation.
Setting up secure login over reverse proxy
Reverse proxying can be set up to log into the panel only using the domain name of the site created in the panel, in accordance with the instructions set out in our documentation.
Installing the panel with the simultaneous issuance of a Let's Encrypt certificate
You will require a valid domain name that points to the IP address of the server on which the panel is to be installed.
When executing the installation script, enter the "--le-domain" parameter and your domain name.
For example, sh install.sh --le-domain mydomain.com
. In this case, after installation, the panel will be accessible at https://mydomain.com:1500/ispmgr
, which will already be protected by an SSL certificate.
Installing an SSL certificate for the IP address of the panel
Issuing an SSL certificate for an IP address is a relatively limited solution that will require the purchase of a specific type of SSL certificate.
You can purchase a PositiveSSL certificate for your IP address, which you can then connect in the control panel. After that, all browsers will cease issuing warnings when you access your control panel's IP address.