link broken: Key and Certificate directories are not properly protected

  • Resolved phonyroyal

    (@phonyroyal)


    3 years, 7 months ago

    RSSSSL displays a Warning that “Your Key and Certificate directories are not properly protected. For more information on this subject, please read this article” but the page shows a 404 error.

    Can you fix the link and point me to the page with info on how to fix this please?

    Thanks

    • This topic was modified 3 years, 7 months ago by phonyroyal.

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Leon Wimmenhoeve

    (@leonwimmenhoeve)

    Hi @phonyroyal,

    Thank you for bringing this to our attention. We will add the article and fix the 404 error as soon as possible.

    The error most likely indicates that the certificate files are placed in the root folder of your WordPress installation. Preferably they are placed one level above the root, which prevents them from being publicly accessible.

    Let us know if you need any further assistance.

    Regards,
    Leon

    Hi Leon,

    Thanks for updating the link. I get the following error. “Your Key and Certificate directories are not properly protected. For more information on this subject, please read this article”

    When I look at the key file, it is a symbolic link that has the following:

    lrwxrwxrwx 1 root root 59 Aug 7 19:18 server.crt -> /etc/letsencrypt/live/onlinespywareexpert.com/fullchain.pem
    lrwxrwxrwx 1 root root 57 Aug 7 19:18 server.key -> /etc/letsencrypt/live/onlinespywareexpert.com/privkey.pem

    The plugin might need to understand these are links and not files to stop the warning. There doesn’t seem to be any way to dismiss the warning.

    Thanks,
    Frank

    Plugin Contributor Rogier Lankhorst

    (@rogierlankhorst)

    Did you use Really Simple SSL to generate a certificate? If so, this message appears when the plugin could not create a folder above the root, and created one in it. It then tries to set up .htaccess protection to block access. The warning appears when that htaccess file is missing, or without the required lines.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘link broken: Key and Certificate directories are not properly protected’ is closed to new replies.