Fail to open ISPConfig site: firefox 8182

[BigB]

It complains about my certificate being invalid, how can I fix this?

IE doesnt open at all

My setup using debian and the howto at http://www.falkotimme.com/howtos/per..._debian_sarge/

worked great until now...

Help please

[falko]

Is ISPConfig running? Execute

netstat -tap

and look if ISPConfig is running on port 81. If not, restart ISPConfig:

/etc/init.d/ispconfig_server restart

BTW, you did try to connect on port 81, didn't you (it's https://url_of_your_server:81)?

It's also possible that the firewall on your desktop is blocking access to port 81. Shut down your firewall and try again.

[BigB]

yes it is running, however the certificates the setup generated seem to be faulty, is there a way to restart that part of the setup or an other way to re-generate those certificates?

[falko]

Try this:

openssl genrsa -des3 -passout pass:yourpassword -out /root/ispconfig/httpd/conf/ssl.key/server.key2 1024
openssl req -new -passin pass:yourpassword -passout pass:yourpassword -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.csr/server.csr -days 365
openssl req -x509 -passin pass:yourpassword -passout pass:yourpassword -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -in /root/ispconfig/httpd/conf/ssl.csr/server.csr -out /root/ispconfig/httpd/conf/ssl.crt/server.crt -days 365
openssl rsa -passin pass:yourpassword -in /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.key/server.key
chmod 400 /root/ispconfig/httpd/conf/ssl.key/server.key

Restart ISPConfig afterwards.

[m u r]

Well, firefox at least gives me the option now. It still says, "This certificate is not in the trusted root database." Is that normal?

[till]

Originally Posted by m u r

Well, firefox at least gives me the option now. It still says, "This certificate is not in the trusted root database." Is that normal?

Yes, because it is an self signed certificate. If you dont want to have this messgae you must buy an SSL Certificate from an SSL Authority.

[badben]

Originally Posted by falko

Try this:

openssl genrsa -des3 -passout pass:yourpassword -out /root/ispconfig/httpd/conf/ssl.key/server.key2 1024
openssl req -new -passin pass:yourpassword -passout pass:yourpassword -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.csr/server.csr -days 365
openssl req -x509 -passin pass:yourpassword -passout pass:yourpassword -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -in /root/ispconfig/httpd/conf/ssl.csr/server.csr -out /root/ispconfig/httpd/conf/ssl.crt/server.crt -days 365
openssl rsa -passin pass:yourpassword -in /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.key/server.key
chmod 400 /root/ispconfig/httpd/conf/ssl.key/server.key

Restart ISPConfig afterwards.

Help!

I have followed the changes to amend the detail of my certificate an now ispconfig will not restart and I can't connect to theserver at port 81.

It won't let me access emails either.

[badben]

emails now work as I restarted saslauthd and postfix.

port 80 works also, it is just https://www.XXXXXXX.com:81/ that won't work.

It just says "The connection was refused when attempting to connect to https://...."

netstat -tap shows nothing for ispconfig and i've tried to restart ispconfig-server three times, no joy.

[nvn]

Restart ISPConfig afterwards.[/QUOTE]


Perfect.... it's working now..
thanks

[asmadius]

CAcert.org offers free certs for domains, emails, servers...

are these ok or is ther something wrong with them. I've used it last year but it don't seem like anybody knows about them or there is something not quit ok.