HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Installation/Configuration (http://www.howtoforge.com/forums/forumdisplay.php?f=27)
-   -   ssl with certificate from startssl.com (http://www.howtoforge.com/forums/showthread.php?t=43381)

weezul 9th February 2010 19:06

ssl with certificate from startssl.com
 
hello,

ive problems getting ssl running with those free certificates from startssl.com

what i did:

at first i created a ssl certificate via ispconfig, then i tried to paste those certificate request and keyfile into the startssl.com form and work with those existing keys but that didnt work.. so i didnt skip the step where i had my own certificate request and keyfile and created a new key and certificate using the startssl webpage.

so i had 4 files:
ssl.key
ca.pem
sub.class1.server.ca.pem
ssl.crt

and i created with openssl req -new -key ssl.key -outsite.csr a new request file.

i pasted the contents of the .csr file an the contents of the ssl.crt file into the ispconfig control pannel and copied ca.pem and sub.class1.server.ca.pem into /var/www/site/ssl
and added this 2 files via the apache directives tab as mentioned in an other post.

after waiting for ispconfig to update all sites dont load anymore, so i guess i'm doing something wrong..

i tried it a few times now and i cant create a new certificate on the site so iam stuck here :/

any help woul be appreciated

till 9th February 2010 22:21

1) create a ssl cert in ispconfig.
2) take the certificate request that ispconfig created and let it sign from startssl.
3) copy the crt that you get from startssl back into ispconfig and choose save as option.

weezul 9th February 2010 23:29

hello,

thats what i tried before but when using my ispconfig certificate iam getting those error message:

Code:

    * Your key was created with a size of 1024 bit and is potentially vulnerable.
    * Make sure to create a RSA key of at least 2048 bit and then try it again.

can i reconfigure ispconfig somehow to create 2048 bit keys?


thanks in advance

till 10th February 2010 09:35

http://www.howtoforge.com/forums/showthread.php?t=42341

weezul 10th February 2010 11:32

thanks now it worked well :)


All times are GMT +2. The time now is 19:18.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.