Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 9th February 2010, 19:06
weezul weezul is offline
Member
 
Join Date: Jul 2008
Posts: 43
Thanks: 3
Thanked 3 Times in 2 Posts
Default ssl with certificate from startssl.com

hello,

ive problems getting ssl running with those free certificates from startssl.com

what i did:

at first i created a ssl certificate via ispconfig, then i tried to paste those certificate request and keyfile into the startssl.com form and work with those existing keys but that didnt work.. so i didnt skip the step where i had my own certificate request and keyfile and created a new key and certificate using the startssl webpage.

so i had 4 files:
ssl.key
ca.pem
sub.class1.server.ca.pem
ssl.crt

and i created with openssl req -new -key ssl.key -outsite.csr a new request file.

i pasted the contents of the .csr file an the contents of the ssl.crt file into the ispconfig control pannel and copied ca.pem and sub.class1.server.ca.pem into /var/www/site/ssl
and added this 2 files via the apache directives tab as mentioned in an other post.

after waiting for ispconfig to update all sites dont load anymore, so i guess i'm doing something wrong..

i tried it a few times now and i cant create a new certificate on the site so iam stuck here :/

any help woul be appreciated
Reply With Quote
Sponsored Links
  #2  
Old 9th February 2010, 22:21
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
Default

1) create a ssl cert in ispconfig.
2) take the certificate request that ispconfig created and let it sign from startssl.
3) copy the crt that you get from startssl back into ispconfig and choose save as option.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 9th February 2010, 23:29
weezul weezul is offline
Member
 
Join Date: Jul 2008
Posts: 43
Thanks: 3
Thanked 3 Times in 2 Posts
Default

hello,

thats what i tried before but when using my ispconfig certificate iam getting those error message:

Code:
    * Your key was created with a size of 1024 bit and is potentially vulnerable.
    * Make sure to create a RSA key of at least 2048 bit and then try it again.
can i reconfigure ispconfig somehow to create 2048 bit keys?


thanks in advance
Reply With Quote
  #4  
Old 10th February 2010, 09:35
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
Default

http://www.howtoforge.com/forums/showthread.php?t=42341
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
weezul (10th February 2010)
  #5  
Old 10th February 2010, 11:32
weezul weezul is offline
Member
 
Join Date: Jul 2008
Posts: 43
Thanks: 3
Thanked 3 Times in 2 Posts
Smile

thanks now it worked well
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig 3 - CentOS 5.4 - SSL Problems!?! owainbaber Installation/Configuration 4 26th July 2011 17:12
Creating a SSL certificate - Quick guide SamTzu Tips/Tricks/Mods 22 4th January 2011 13:38
Is my postfix is hacked? bzzik Server Operation 21 15th July 2009 14:13
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
Help installing an SSL certificate james@thereidsonline.com Installation/Configuration 1 26th June 2007 18:11


All times are GMT +2. The time now is 01:11.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.