Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 7th April 2009, 14:13
lubos lubos is offline
Member
 
Join Date: Oct 2007
Location: Belfast, UK - NI
Posts: 59
Thanks: 29
Thanked 17 Times in 13 Posts
Default SOLVED: SSL cert installation for admin area

I know there is lots of threads about this and I read trough them last 2 days and used a lot of suggestions but could not find help.

I have class2 certificate from startssl.com named ssl.crt
I downloaded their certificates:
ca.crt
ca-bundle.crt
sub.class1.server.ca.crt
sub.class2.server.ca.crt
sub.class3.server.ca.crt
sub.class4.server.ca.crt

and put all certificates into /root/ispconfig/httpd/conf/ssl.crt (the default ca-bundle.crt from ISPconfig renamed to ca-bundle.crt.ispconf)

I edited httpd.conf in /root/ispconfig/httpd/conf :

Code:
SSLCertificateFile /root/ispconfig/httpd/conf/ssl.crt/ssl.crt
SSLCertificateKeyFile /root/ispconfig/httpd/conf/ssl.key/server.key
SSLCertificateChainFile /root/ispconfig/httpd/conf/ssl.crt/sub.class2.server.ca.crt
SSLCACertificateFile /root/ispconfig/httpd/conf/ssl.crt/ca-bundle.crt
I restarted server

All the same - browser deemed my certificate unsecure (not recognized authority).

I changed SSLCertificateChainFile and SSLCACertificateFile to all possible combinations, each time restarted server and cleared cache in browser. No joy.

When I do:
Code:
openssl verify -CAfile /root/ispconfig/httpd/conf/ssl.crt/ca-bundle.crt -purpose sslserver /root/ispconfig/httpd/conf/ssl.crt/ssl.crt
the result is OK but then I can't access admin area on port 81 (websites and emails works) = that is second problem I need help with, I have one live server I cant access admin area now This is working now. I had typo in httpd/conf/httpd.conf. I am able to access admin on this site after fixing typo and restarting ISPConfig.

What I am duing wrong? Where else I have to edit something?

More info: obviously I use https connection to admin area on port 81
the certificate is specific to the servers admin area - not valid for other domains (server2.mydomain.net)
systems are Debian Lenny (1x) and Debian Etch (1x)

Thanks very much for help.


Update
The certificate on the server which had typo is now working. I am going trough the other's conf file to make sure there is not a typo as well.
I am reinstalling ISPConfig on the second server once more and after I'll try to install certificate again. Will see what will happened.
__________________
Safe computer? Only when unplugged.

Last edited by lubos; 7th April 2009 at 22:08. Reason: update on status
Reply With Quote
Sponsored Links
 

Bookmarks

Tags
installation, ispconfig, ssl certificate

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
SSL Cert for site filch General 3 10th December 2008 13:49
Replacing SSL Cert jonwatson General 4 24th February 2008 15:40
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
New SSL Cert PoleCat Installation/Configuration 15 4th July 2007 10:13
Can't get SSL Cert to work rbartz Installation/Configuration 4 23rd April 2006 09:32


All times are GMT +2. The time now is 17:09.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.