Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 21st September 2009, 15:26
fulacom fulacom is offline
Junior Member
 
Join Date: Sep 2009
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default SSL cerificate is not working on ISP Config

Hi all,

I am trying to install certificate to one of the domains under ISP Config. I followed the instructions from http://www.ispconfig.org/downloads/m...nde_en_src.htm. However, when I go the the site to view the certificate, I get this error

The CA Root certificate is not trusted. To enable trust, install this certificate in the Trusted Root Certification Authorities store.
Issued to: www.mydomain.com
Issued by: www.mydomain.com


Can anyone help?

Thanks!
Reply With Quote
Sponsored Links
  #2  
Old 22nd September 2009, 12:02
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,005
Thanks: 840
Thanked 5,650 Times in 4,460 Posts
Default

The certificate is working fine. Its just a self signed certificate which shows this warning message in the browser. If you need a signed certificate, you have to buy one e.g. from godaddy or instantssl.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 22nd September 2009, 12:48
fulacom fulacom is offline
Junior Member
 
Join Date: Sep 2009
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thanks for your response.

I have purchased a signed cert from RapidSSL. I followed the instructions from the ISPConfig help. We pasted the cert text into the SSL Certificate text box, selected save certificate from the drop down box and then clicked save. When we navigate to the website, it still shows the self-signed cert. We have restarted the apache and the server to see if this would work, but to no avail.

Any help will be much appreciated...

Thanks
Reply With Quote
  #4  
Old 23rd September 2009, 12:34
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,005
Thanks: 840
Thanked 5,650 Times in 4,460 Posts
Default

It might be nescessary that you install a ssl chain file for the certificates from this authority to work properly. Did they send you a ssl cahin file too together with the certificate file?
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 23rd September 2009, 17:20
fulacom fulacom is offline
Junior Member
 
Join Date: Sep 2009
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Yes, they sent us root certificate and SSL certificate. How do we install root certificate?

Thanks a lot.
Reply With Quote
  #6  
Old 23rd September 2009, 17:46
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,005
Thanks: 840
Thanked 5,650 Times in 4,460 Posts
Default

Copy the root certificate file to the ssl folder of the website. Then add the following line to the apache directives field:

SSLCACertificateFile /home/www/www.yourdomain.tld/ssl/ca.txt

and change the path so that it points to the root certificate.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #7  
Old 23rd September 2009, 18:31
fulacom fulacom is offline
Junior Member
 
Join Date: Sep 2009
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Hello,

I created the ca.txt file and pasted in the CA Cert text. Then edited the path for the apache directives. We cannot access any websites now. I checked and the httpd failed to start, I tried to start it manually to no avail. I'm restoring a backup of the server.

Do you have any suggestions?
Reply With Quote
  #8  
Old 23rd September 2009, 18:34
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,005
Thanks: 840
Thanked 5,650 Times in 4,460 Posts
 
Default

No need to restore a backup. Just edit the vhost_ispconfig.conf file nad comment out the line and restart apache.

The look at the apache logs and ssl error log why apache afiled to start. I guess that either the path to the cert was wrong or the cert was corrupted or incompatible so that apache was not able to read the content
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Tags
ispconfig, ispconfig 2, ssl, ssl certificate, ssl on ispconfig

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Cloning ISP Config unsichtbare Installation/Configuration 3 18th December 2007 18:21
ISP Config James E Server Operation 3 13th December 2007 21:26
Migration: Sites from one to the other server (ISP Config 2.2.6 to 2.2.18) eric.balk General 1 26th November 2007 09:28
ISPConfig 2.2.14 released till General 48 20th July 2007 00:46
ISP Config Installation on Suse 9.3 gimhan90 Installation/Configuration 5 20th January 2006 11:24


All times are GMT +2. The time now is 10:22.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.