View Single Post
  #9  
Old 27th January 2012, 20:51
fxs fxs is offline
Junior Member
 
Join Date: Jan 2012
Posts: 27
Thanks: 2
Thanked 1 Time in 1 Post
Default

On the second server (smallest but with debian 6, Isp 3 (ovh) upgd to 3.042, this is what I get

Quote:
root@ksxxxxx:/usr/local/ispconfig/interface/ssl# ls -l
total 20
-rw-r--r-- 1 root ispconfig 2963 Jan 27 18:56 ispserver.crt
-rwxr-x--- 1 ispconfig ispconfig 2394 Jan 27 18:46 ispserver.crt_bak
-rwxr-x--- 1 ispconfig ispconfig 1765 Jan 27 18:46 ispserver.csr
-rwxr-x--- 1 ispconfig ispconfig 3247 Jan 27 18:46 ispserver.key
-rwxr-x--- 1 ispconfig ispconfig 3311 Jan 27 18:45 ispserver.key.secure
root@ksxxxx:~# cd /usr/local/ispconfig/interface/ssl
root@ksxxxx:/usr/local/ispconfig/interface/ssl# wget https://www.startssl.com/c erts/ca.pem
--2012-01-27 19:00:08-- https://www.startssl.com/certs/ca.pem
Resolving www.startssl.com... xxxxxxxxx
Connecting to www.startssl.com|xxxxxx|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2760 (2.7K) [application/x-x509-ca-cert]
Saving to: `ca.pem'

100%[======================================>] 2,760 --.-K/s in 0s

2012-01-27 19:00:09 (30.6 MB/s) - `ca.pem' saved [2760/2760]

root@ksxxxxx:/usr/local/ispconfig/interface/ssl# wget https://www.startssl.com/c erts/sub.class1.server.ca.pem
--2012-01-27 19:00:21-- https://www.startssl.com/certs/sub.class1.server.ca.pem
Resolving www.startssl.com... xxxxxxxxxxxx
Connecting to www.startssl.com|xxxxxxx|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2212 (2.2K) [application/x-x509-ca-cert]
Saving to: `sub.class1.server.ca.pem'
100%[======================================>] 2,212 --.-K/s in 0s
2012-01-27 19:00:21 (38.9 MB/s) - `sub.class1.server.ca.pem' saved [2212/221
root@ksxxxx:/usr/local/ispconfig/interface/ssl# mv ca.pem startssl.ca.crt
root@ksxxxx:/usr/local/ispconfig/interface/ssl# mv sub.class1.server.ca.pem sta rtssl.sub.class1.server.ca.crt
root@ksxxxxx:/usr/local/ispconfig/interface/ssl# cat startssl.sub.class1.server. ca.crt startssl.ca.crt > startssl.chain.class1.server.crt
root@ksxxxx:/usr/local/ispconfig/interface/ssl# cat ispserver.{key,crt} startss l.chain.class1.server.crt > ispserver.pem
root@ksxxxxx:/usr/local/ispconfig/interface/ssl# chmod 600 ispserver.pem
root@ksxxxx:/usr/local/ispconfig/interface/ssl# nano /etc/apache2/sites-availab le/ispconfig.vhost
root@ksxxx:/usr/local/ispconfig/interface/ssl# nano /etc/apache2/sites-availab le/ispconfig.vhost
root@ksxxx:/usr/local/ispconfig/interface/ssl# /etc/init.d/apache2 restart
Restarting web server: apache2[Fri Jan 27 19:04:43 2012] [warn] NameVirtualHost xxxxx:80 has no VirtualHosts
[Fri Jan 27 19:04:43 2012] [warn] NameVirtualHost xxxxx:443 has no VirtualHosts
... waiting [Fri Jan 27 19:04:44 2012] [warn] NameVirtualHost xxxx:80 has no VirtualHosts
[Fri Jan 27 19:04:44 2012] [warn] NameVirtualHost xxxxxx:443 has no VirtualHosts
Action 'start' failed.
The Apache error log may have more information.
failed!
and later

Quote:
root@ksxxxxx:/usr/local/ispconfig/interface/ssl# ls -l
total 48
-rw-r--r-- 1 root ispconfig 2963 Jan 27 18:56 ispserver.crt
-rwxr-x--- 1 ispconfig ispconfig 2394 Jan 27 18:46 ispserver.crt_bak
-rwxr-x--- 1 ispconfig ispconfig 1765 Jan 27 18:46 ispserver.csr
-rwxr-x--- 1 ispconfig ispconfig 3247 Jan 27 18:46 ispserver.key
-rwxr-x--- 1 ispconfig ispconfig 3311 Jan 27 18:45 ispserver.key.secure
-rw------- 1 root ispconfig 11182 Jan 27 19:01 ispserver.pem
-rw-r--r-- 1 root ispconfig 2760 May 7 2008 startssl.ca.crt
-rw-r--r-- 1 root ispconfig 4972 Jan 27 19:00 startssl.chain.class1.server.crt
-rw-r--r-- 1 root ispconfig 2212 Apr 18 2010 startssl.sub.class1.server.ca.crt
root@ksxxxx:/usr/local/ispconfig/interface/ssl#
And inside ispconfig.vhost I see

Quote:
# SSL Configuration
SSLEngine On
SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt
SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key
## must be re-added after an ISPConfig update!!!
SSLCertificateChainFile /usr/local/ispconfig/interface/ssl/startssl.sub.class1.server.ca.crt
Reply With Quote