Installation of 2048 bit SSL certificate

[mitchnelson]

Hello All.

We have generated 2048 bit CSR using Apache openssl and installed 2048 bit certificate in CPanel. But its not working its giving us the below error message while browsing the site in firefox.

Secure Connection Failed

An error occurred during a connection to domainname.com.
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)

The page you are trying to view can not be shown because the authenticity of the received data could not be verified.

* Please contact the web site owners to inform them of this problem.

We found that 2048 bit is not supported by CPanel. Does any body know the issue and can let us know how we can install 2048 bit certificate in CPANEL or APACHE or can let us know any alternatives.

 

[TopQHost]

Did you have any luck? I see the 2048 bit option just added under cPanel's CSR generation page in WHM. I'm pretty sure I didn't see this before. So, it looks like some work may be going towards this???

 

[engineerroy2008]

What is the use of 2048 bit ssl certificate, are u using some restricted sites ? Normal ssl certificates are not suitable for this?

 

[mark_ssltech]

2048 bit use for VeriSign EV product, am I right?

 

[R-n-R]

I know this is a very old post, but I did find this thread doing a Google Search so if I found it other might as well, so might as well have some update info here.

As of the past several months just about ALL SSL Certificate vendors now ONLY issue 2048 bit certificates. If there still some that issue 1024 bit they will not for long.

With the 2048 bit certificates just about all 2048 bit Certificates require a Intermediate Certificate (chain certificate) to go with the the 3rd party SSL Certificate that you purchased. With a LOT of 1024 bit certificates expiring and coming up for renewal they will need to be replaced with 2048 bit certificates but give very little if any instructions that you will need to add the Intermediate Certificate before it will work properly.

We have and others have had much difficultly with cPanel trying to get the 2048 bit with the bundles installed correctly. Most of the time having to manually install the 2048 certificate with the CABundle.

Do your home work other wises your site you could start having a LOT of shopping cart abandonment when your customer sees SSL Certificate issues.

Good luck out there.

 

[pinellashosting]

What is the use of 2048 bit ssl certificate, are u using some restricted sites ? Normal ssl certificates are not suitable for this?

2048 is the standard these days.

 

[handsonhosting]

Definitely an old thread from 2009 when the 2048-bit certs were only coming on the market. Maybe this thread should be locked?

cPanel shouldn't have any problem installing 2048-bit certificates. You do need the KEY, CRT and CA Bundles when installing, but this should be standard on any certificate these days.

 

[hostloc]

no issue any more, this thread can be locked since problem gone.