Symptoms

Installation of SSL certificate to a website via CCP shows an error:

Cannot install host certificate without private key

In OA core.log the following message could be seen:

SDK::Certificate invocation failedjava.io.IOException: unrecognised object: DH PARAMETERS

Cause

Customer tried to upload certificate with DH Group embedded to the certificate chain. Currently, OA Webhosting Linux modules does not support using of customized DH groups. Support of Forward Secrecy along with customization of DH keys is considered to be added to product in scope of Feature Request PFR-850.

Resolution

Currently there are no workaround and it is not possible to upload customized DH group. Please contact your Technical Manager or a member of Pooled Technical Associates team in order to clarify its status

Internal content