HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   SSL on ISP Config (http://www.howtoforge.com/forums/showthread.php?t=39448)

fulacom 21st September 2009 15:29

SSL on ISP Config
 
Hi all,

I am trying to install certificate to one of the domains under ISP Config. I followed the instructions from http://www.ispconfig.org/downloads/m...nde_en_src.htm. However, when I go the the site to view the certificate, I get this error

The CA Root certificate is not trusted. To enable trust, install this certificate in the Trusted Root Certification Authorities store.
Issued to: www.mydomain.com
Issued by: www.mydomain.com

Can anyone help?

Thanks!

Leszek 21st September 2009 18:34

That is normal. Your browser complains because used certificate is self signed instead of being signed by a worldwide trusted certificate authority that costs some money. The SSL encryption still works.
If You have a certificate signed by a trusted CA then this is not good.

fulacom 21st September 2009 19:42

I purchased and tried installing Rapid SSL certificate. So it's a trusted CA. Is there any way I can fix this issue?

Leszek 22nd September 2009 01:53

mydomain.com indicates that the server, for which the certificate is for doesn't use it. It uses the default instead. You have to reconfigure Apache to use the new one by entering it's path and making sure it is readible by the server. The path to the key associated to the certificate is also important.
I can't tell You how to do that step by step because I don't have any servers with ISPConfig 3 at the moment. I can only show You a tip which can put You on the right way: http://www.faqforge.com/linux/contro...-controlpanel/

It's also important what is the certificate meant for: the control panel or customers. By default Apache has to have seperate certificates for every ip address/domain so it could give some trouble in case You'd like to have SSL virtual hosts. I'm not sure if ISPConfig 3 supports the new way of handling SSL for 1+ accounts with a single IP.


All times are GMT +2. The time now is 06:19.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.