HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Installation/Configuration (http://www.howtoforge.com/forums/forumdisplay.php?f=16)
-   -   Ssl (http://www.howtoforge.com/forums/showthread.php?t=197)

boardmain 5th August 2005 10:39

Ssl
 
i can create only one certificate for ip?

i can't create for any domain?

till 5th August 2005 10:40

Quote:

Originally Posted by boardmain
i can create only one certificate for ip?

i can't create for any domain?

Yes, thats a limitation in the Apache Webserver. Only one SSL enabled
vHost per IP.

KenMcGinnis 8th August 2005 07:07

I want a 'real' SSL Cert
 
I have everything installed and working ok - but it has that dummy cert. My web site name is server.domain.com. I want people to download some files and I need the site to show a 'real' certificate. I can get the cert files ok, Where can I put them?

My server is at 192.168.0.195. Can I put that in the SSL Cert request and have it work for all web sites on my server? If not, how can I do that? I would like all web sites to have the cert and use https://xxxxx.domain.com where xxxx can be anything?

falko 8th August 2005 09:00

Quote:

Originally Posted by KenMcGinnis
I have everything installed and working ok - but it has that dummy cert. My web site name is server.domain.com. I want people to download some files and I need the site to show a 'real' certificate. I can get the cert files ok, Where can I put them?

The files are in /root/ispconfig/httpd/conf/ssl.*.

Quote:

Originally Posted by KenMcGinnis
My server is at 192.168.0.195. Can I put that in the SSL Cert request and have it work for all web sites on my server? If not, how can I do that? I would like all web sites to have the cert and use https://xxxxx.domain.com where xxxx can be anything?

You need a certificate for _each_ web site. But note that you can only have one SSL web site per IP address!

KenMcGinnis 9th August 2005 01:06

I have 2 dsl connections with 2 ip addresses and 2 lan cards in my server. Each dsl router opens ports to one of the lan cards.

Can I have 2 SSL certificates since I have 2 IP addresses?

One problem I have noticed is that I can only have one default gateway (when I set it for one lan card, it automatically sets the same value for the other lan card)

falko 9th August 2005 09:19

Quote:

Originally Posted by KenMcGinnis
Can I have 2 SSL certificates since I have 2 IP addresses?

Yes, one for each IP address.

KenMcGinnis 9th August 2005 20:01

Two SSL Certs with 2 IP addresses
 
Sorry if I am asking basic questions, but I do not have much time in with Linux. I set up an apache2 server with SuSE 9.0 about 18 months ago using a cookbook (which I can't find anymore). The system never went down or had a single problem so I lost all my notes and forgot how I did things. I have ispconfig running just fine now with 4 resellers and about 16 clients. One of the clients must have ssl for file http downloads (and 3 others are probably going to require it).

You said (above) where to put the cert files and I did that and it works. But how to put a 2nd one? if I name it server.key/crt, it will write over the 1st one?

till 9th August 2005 20:06

Quote:

Originally Posted by KenMcGinnis
Sorry if I am asking basic questions, but I do not have much time in with Linux. I set up an apache2 server with SuSE 9.0 about 18 months ago using a cookbook (which I can't find anymore). The system never went down or had a single problem so I lost all my notes and forgot how I did things. I have ispconfig running just fine now with 4 resellers and about 16 clients. One of the clients must have ssl for file http downloads (and 3 others are probably going to require it).

You said (above) where to put the cert files and I did that and it works. But how to put a 2nd one? if I name it server.key/crt, it will write over the 1st one?

If you have ISPConfig installed you dont have to make SSL-Certificates manually, just use the functions in ISPConfig. ISPConfig takes care where to store the certificate files and make the correct entries in the vhost configuration.

KenMcGinnis 9th August 2005 22:33

Ssl
 
Thanks that worked, pretty easy. This is a pretty powerful interface.

I found the cert it made - in /srv/www in that client location. I guess if I send the code off somewhere and get a regular certificate, I can paste it in the crt window and save and that will do it?

falko 9th August 2005 22:54

Quote:

Originally Posted by KenMcGinnis
Thanks that worked, pretty easy. This is a pretty powerful interface.

I found the cert it made - in /srv/www in that client location. I guess if I send the code off somewhere and get a regular certificate, I can paste it in the crt window and save and that will do it?

You can send the code from the "SSL Request" textarea in the ISPConfig interface to a Certificate Authority (CA) like instantssl.com. The certificate you get back has to be copied to the "SSL Certificate" textarea, and under "Action" you choose "Save certificate" and click on "Save". That's it. :)


All times are GMT +2. The time now is 13:14.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.