HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   HOWTO-Related Questions (http://www.howtoforge.com/forums/forumdisplay.php?f=2)
-   -   Pb with SSL Installation on ISP3 with CENTos (http://www.howtoforge.com/forums/showthread.php?t=59634)

Plugandcom 19th November 2012 10:51

Pb with SSL Installation on ISP3 with CENTos
 
Hi,

There's a problem with the installation of a SSL certificate.

When the forms (SSL Request & SSL certificate) are informed, The certificate is saved. (All right).

But after the restart of the server, The HTTPD failed. So, no access to the manager of ISP... The only possibility is the SSH connect to erase the new codes of the files : /ETC/HTTPD/conf/Domain name.vhost.

But the SSL doesn't Work... And we don't make this configuration... The certificate on the navigators (Chrome, Firefox, etc...) is not available.

Can you help us... ?

cbj4074 19th November 2012 16:34

Which Web-server are you using? Apache?

What is the error output in Web-server's log file?

Plugandcom 19th November 2012 16:59

Hi.

We are on Apache 2.

And for the LOGS... Maybe, the pb is on this code :

[Mon Nov 19 14:50:34 2012] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Nov 19 14:50:34 2012] [warn] RSA server certificate CommonName (CN) `server1.example.com' does NOT match server name!?

But what the name of the VM ??? or where can we setup it ??? If it's the good error ?

cbj4074 20th November 2012 21:36

Quote:

And for the LOGS... Maybe, the pb is on this code :

[Mon Nov 19 14:50:34 2012] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Nov 19 14:50:34 2012] [warn] RSA server certificate CommonName (CN) `server1.example.com' does NOT match server name!?
The first message is usually the result of using a self-signed certificate, which is, by definition, a CA certificate. If you are not using a self-signed certificate, then something is misconfigured.

The second message means that the effective "ServerName" directive value (usually defined at the vhost level) does not match the SSL certificate's "CommonName" field.

Neither of these messages should cause Apache to fail to start. So, the problem seems to be elsewhere.

Please provide more background on what exactly you are trying to achieve, and the exact steps that you are taking in the process.

Are you trying to install a valid, CA-signed certificate for a website that you created with ISPConfig? Or are you trying to generate your own self-signed certificate on the command-line and then paste it into ISPConfig? Or are you trying to secure ISPConfig itself with an SSL certificate?

We need more details to be able to help. And please avoid using shorthand in your posts, such as "pb" for what I assume to be "problem".


All times are GMT +2. The time now is 07:28.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.