HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Installation/Configuration (http://www.howtoforge.com/forums/forumdisplay.php?f=27)
-   -   Issue configuring an SSL domain with current certificate (http://www.howtoforge.com/forums/showthread.php?t=57860)

jbd123 8th July 2012 18:25

Issue configuring an SSL domain with current certificate
 
Hi

I've been moving some domains into ISPConfig. Previously the domains were all manually created and managed but I've hit an issue with an SSL domain.

Our domain, call it "example.com", has an existing Key, CSR, Cert and Bundle. The certificate is for "www.example.com" and has worked ok for the last 9 months or so.

I set example.com up in ISPConfig, clicked the "SSL" checkbox & Auto Subdomain = "www" ... and added the CSR, Cert and Intermediate Cert to the relevant fields, select "Save Certificate", hit save and wait for the job queue to run.
Upon browsing to the domain "https://www.example.com", Chrome throws an error about a self signed certificate - the site is delivering the self-signed cert that was used in ISPConfig install (default vhost?).

I jump onto a shell:

* nginx -t - shows all is OK with the server config
* there is no SSL server conf file set up for example.com - it seems that ISPConfig is saving the cert but not creating the required web server config file.
* in the domain's "ssl" dir I see www.example.com.csr and www.example.com.crt - no sign of the key file, though.

In order to get the SSL domain up and running, I created a web server config file containing the required path to the cert (ssl_certificate) and the key file (ssl_certificate_key).

With a pre-existing SSL setup how do I get ISPConfig to find the key file and create the required server config file. I'm concerned that it will create the vhost file and conflict with my manually created file.

Using latest ISPConfig stable & Nginx...

Thanks in advance

till 9th July 2012 10:34

You have to copy the key file manually when you havent created the ssl cert in ispconfig. See chapter 541 of the ISPConfig manual:

"5.4.1 How Do I Import An Existing SSL Certificate Into A Web Site
That Was Created Later In ISPConfig?"

http://www.ispconfig.org/ispconfig-3...nfig-3-manual/


All times are GMT +2. The time now is 10:50.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.