View Single Post
  #3  
Old 13th May 2009, 06:16
danuel danuel is offline
Junior Member
 
Join Date: May 2009
Posts: 5
Thanks: 1
Thanked 1 Time in 1 Post
Default StartSSL.com for Vhosts

I have a similar issue installing the CA certificates for StartSSL.com for Vhosts. It installs once /etc/apache2/vhosts/Vhosts_ispconfig.conf is edited and following code added

Code:
# existing lines
SSLEngine on
SSLCertificateFile /var/www/some.site.com/ssl/site.crt
SSLCertificateKeyFile /var/www/some.site.com/ssl/site.key

#add these lines for Certificate Authority 
SSLCertificateChainFile var/www/some.site.com/ssl/sub.class1.server.ca.pem
SSLCACertificateFile var/www/some.site.com/ssl/ca.pem
Please ensure you replace some.site.com with the actual site name (folder path must exists).

See http://www.startssl.com/?app=21.
Make sure you download sub.class1.server.ca.pem and ca.pem from http://www.startssl.com/certs/. Store them in var/www/some.site.com/ssl/

Unfortunately, as soon you make any changes in ISPConfig web interface, the file /etc/apache2/vhosts/Vhosts_ispconfig.conf is overwritten. Falko, is there a way to fix this please? If you need help with modifying the php function that writes the Vhosts config file, maybe I can help. But a better fix would be to also re-work the SSL tab in ISPConfig so there is space for Certificate Authority Chain file and Certificate file.

Last edited by danuel; 13th May 2009 at 06:19.
Reply With Quote