#1  
Old 23rd April 2010, 12:40
Jorem Jorem is offline
Senior Member
 
Join Date: Oct 2005
Posts: 139
Thanks: 5
Thanked 4 Times in 4 Posts
Default SSL certificate

I am struggling with the SSL certificate for the ISPConfig Control Panel.

I tried to install a certificate to a domain through the control panel to use it for the login: https://www.domain.com:81
But I keep getting errors.

Is there a step by step guide about how to install a SSL certificate in the ISPConfig server?
Which certificate do need to buy?

Hope someone can help. Time to get a real certificate instead of the self signed one .
Reply With Quote
Sponsored Links
  #2  
Old 23rd April 2010, 13:15
Mark_NL Mark_NL is offline
Senior Member
 
Join Date: Sep 2008
Location: The Netherlands
Posts: 912
Thanks: 12
Thanked 100 Times in 96 Posts
Default

It would be nice if you informed us with the error you're getting ..
Reply With Quote
  #3  
Old 23rd April 2010, 13:33
Jorem Jorem is offline
Senior Member
 
Join Date: Oct 2005
Posts: 139
Thanks: 5
Thanked 4 Times in 4 Posts
Default

I got a error for the CSR key that should be 2048 instead of 1024.

Found this in another post that helped out:

1. edit the openssl.cnf.master file
(typically it is in /root/ispconfig/isp/conf)
change the "default_bits" from "1024" to "2048"

2. edit the file config.lib.php
(typically it is in /root/ispconfig/scripts/lib
Change the "1024" to "2048" in the following command:

openssl genrsa -des3 -rand $rand_file -passout pass:$ssl_password -out $key_file 1024 && openssl req -new -passin pass:$ssl_password -passout pass:$ssl_password -key

3. restart ispconfig (i.e. service ispconfig_server restart)

Waiting for the Certificate from GoDaddy now. Found this topic with a working solutions for GoDaddy. So should also work for me .
http://howtoforge.com/forums/showthr...=ISPConfig+CSR
Reply With Quote
The Following User Says Thank You to Jorem For This Useful Post:
falko (25th April 2010)
  #4  
Old 25th April 2010, 23:23
demortes demortes is offline
Member
 
Join Date: Mar 2007
Posts: 71
Thanks: 6
Thanked 1 Time in 1 Post
Default

Thought I should let you guys know, for those personal non-commercial folks out there, you can get a free SSL certificate from StartSSL. Only costs if you are using it for commercial reasons, and I have installed it absolutely perfectly. They also provide support for their certificates through Jabber, 24 hours a day.

Link: http://www.startssl.com/

Also, they offer free certificates for email encryption and signing. That's another topic however

Last edited by demortes; 25th April 2010 at 23:25. Reason: Added link
Reply With Quote
  #5  
Old 26th April 2010, 08:13
Jorem Jorem is offline
Senior Member
 
Join Date: Oct 2005
Posts: 139
Thanks: 5
Thanked 4 Times in 4 Posts
Default

The install on the domain went fine. But when I want to copy the cert to the ISPConfig apache server it stops working.

I copy the cert to the /root/ispconfig/httpd/conf/ssl.crt directory. After that I changed the httpd.conf file to point to the new cert (default to server.crt).

When I restart ISPConfig server I get a error that it can not start server.

In another post I read about the directory /root/ispconfig/httpd/ssl . But I do not have this directory. Do I need to make it?
What do I need to change in the httpd.conf to get it to work with the new certificate?

For the domain it is working great, only for the :81 now.
Reply With Quote
  #6  
Old 26th April 2010, 08:59
createch createch is offline
Senior Member
 
Join Date: Aug 2007
Posts: 118
Thanks: 24
Thanked 16 Times in 13 Posts
Default

Try this...

1. Upload the 2 key files from Godaddy to the ssl directory of the domain concerned (gd_bundle.crt and yourname.crt), then

2. In the ISPConfig panel, go to the domain concerned, add the apache directive:

SSLCertificateChainFile /var/www/web#/ssl/gd_bundle.crt
[replace the above # with the domain number]

3. Restart http (i.e. service httpd restart)
Reply With Quote
  #7  
Old 4th February 2011, 14:39
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,740 Times in 2,575 Posts
Default

Quote:
Originally Posted by Jorem View Post
The install on the domain went fine. But when I want to copy the cert to the ISPConfig apache server it stops working.

I copy the cert to the /root/ispconfig/httpd/conf/ssl.crt directory. After that I changed the httpd.conf file to point to the new cert (default to server.crt).

When I restart ISPConfig server I get a error that it can not start server.

In another post I read about the directory /root/ispconfig/httpd/ssl . But I do not have this directory. Do I need to make it?
What do I need to change in the httpd.conf to get it to work with the new certificate?

For the domain it is working great, only for the :81 now.
When you try this, are there any errors in the ISPConfig apache error log in /root/ispconfig/httpd/logs/?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig 3 - CentOS 5.4 - SSL Problems!?! owainbaber Installation/Configuration 4 26th July 2011 17:12
Creating a SSL certificate - Quick guide SamTzu Tips/Tricks/Mods 22 4th January 2011 13:38
Is my postfix is hacked? bzzik Server Operation 21 15th July 2009 14:13
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
Help installing an SSL certificate james@thereidsonline.com Installation/Configuration 1 26th June 2007 18:11


All times are GMT +2. The time now is 13:23.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.