HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Installation/Configuration (http://www.howtoforge.com/forums/forumdisplay.php?f=16)
-   -   SSL Cert Question for ISPConfig Access (http://www.howtoforge.com/forums/showthread.php?t=20336)

giganet 12th February 2008 06:25

SSL Cert Question for ISPConfig Access
 
Hello group

I posed this question some time ago and Till did respond, however I have been out of my office for months now and can't locate his response in my email client..

Anyhow...

My server is running Ubuntu 7.10 and ISPConfig.

When I try to access ISPConfig using the URL: https://giganetwireless.net:81/
The browser just works and works never going to the ISPConfig login screen.
This is a SSL certificate issue isn't it?

I have logged into ISPConfig from the server Desktop itself and have accessed the primary domain giganetwireless.net, then I navigated to SSL then I entered the company information then I selected 'Create Certificate' then chose 'Save'.

The server generated a CSR and a Certificate too, however I want to buy a new NetSol SSL Certificate to install onto this server, can someone direct me to the steps to be taken to complete this task.

I assume I must submit the CSR to NetSol and they will in-turn generate a SSL Certificate to be installed afterwards...

Thanking you in advance for your help with this matter.

Regards

till 12th February 2008 10:10

The server on port 81 has nothing to do with the website were you created the SSL cert. The SSL websites run on port 443.

Please try to access ISPConfig with firefox and see if you gat any SSL error message.

giganet 14th February 2008 20:32

Hi Till

Thank you for the response, and I aplogize for the lapse in response.

I use FF as my primary web-browser, when I try to access https://giganetwireless.com:81/ the browser never times-out or resturns any sort of SSL error message.

Thanking you in advance for your help with this matter.

Regards

till 15th February 2008 11:17

Did you try to connect with and without https on the IP address of the server instaed of the hostname?

giganet 15th February 2008 21:09

Hi Till

Thank you for the reply...

Here are my findings with your suggestion:

1) When I try accessing ISPConfig VIA: https://65.197.209.3:81/
The browser works and works but never even returns an error msg of any sort.

2) When I try accessing ISPConfig VIA http://65.197.209.3:81/
The server sends the browser to the Shared IP page from ISPConfig.


Have a great day

Regards

falko 16th February 2008 18:03

Quote:

Originally Posted by giganet
1) When I try accessing ISPConfig VIA: https://65.197.209.3:81/
The browser works and works but never even returns an error msg of any sort.

Please recreate the SSL certificate: http://www.howtoforge.com/forums/showthread.php?t=121

giganet 23rd February 2008 05:39

Hi Falko...

I just this evening got a chance to re-create the SSL cert for one of my two servers having this SSL OR ISPConfig access problem.

Doing the following:
Quote:

openssl genrsa -des3 -passout pass:ispconf06 -out /root/ispconfig/httpd/conf/ssl.key/server.key2 1024
openssl req -new -passin pass:ispconf06 -passout pass:ispconf06 -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.csr/server.csr -days 730
openssl req -x509 -passin pass:ispconf06 -passout pass:ispconf06 -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -in /root/ispconfig/httpd/conf/ssl.csr/server.csr -out /root/ispconfig/httpd/conf/ssl.crt/server.crt -days 730
openssl rsa -passin pass:ispconf06 -in /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.key/server.key
chmod 400 /root/ispconfig/httpd/conf/ssl.key/server.key

Restarted ISPConfig afterwards.
/etc/init.d/ispconfig_server restart
Accessing ISPConfig is un-successful still.

What's weird is one my NIX servers has a desktop on it and I can access either of the two servers ISPConfig VIA web-browser, yet on MS servers and PC's I am unable to access ISPConfig login VIA web-browser?

Thanking you in advance for your help Falko

Regards

falko 24th February 2008 13:42

Please check all your firewalls if port 81 is blocked.
Is the ISPConfig server in a LAN (behind a router), or is it connected directly to the internet (e.g. in a datacenter)?

giganet 24th February 2008 23:31

Thank you rof the reply Falko

My servers are connected directly to the Internet.
The workstations I am attempting to access ISPConfig from are however behind a firewall (2).

I have added FW rules to my trunk interceptor and DS1 routers allowing port 81 traffic both in and outward bound.

From any one of my workstations I am able to ping any one of the specific servers running ISPConfig at port 81.

xx.xxx.xxx.x:81 successfully returns pings, this should indidcate that the firewall rule is allowing access to port 81 wouldn't it?

However I am still unable to access ISPConfig on either server VIA web-browser...

Would you still suggest FW tweaking Falko?

Regards

leventersoy 24th February 2008 23:40

try this command


/root/ispconfig/httpd/bin/apachectl startssl


All times are GMT +2. The time now is 11:42.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.