#1  
Old 31st May 2011, 02:47
snowfly snowfly is offline
Member
 
Join Date: Jul 2006
Posts: 90
Thanks: 0
Thanked 4 Times in 3 Posts
Default Adding SSL certificate to Site

Can anyone help me with setting up an SSL certificate for a site on ISPconfig 3?

I have web site that was running perfectly fine on a separate custom debian system (not ISPconfig), with an SSL cert.

And we moved this site to a new ISPconfig3 server.

In the ISPconfig3 interface I pasted the SSL cert into the "SSL Certificate" field on the SSL tab of Web Domain.
And ticked the box for SSL.

However site does not work.
Firefox reports error:
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)

I cannot find anything in ispconfig logs.

When I view the apache config file (e.g. /etc/apache2/sites-enabled/abc.domain.com) I cannot see any reference of SSL.

On our previous custom server, we had these entries:

SSLEngine On
SSLCertificateFile /etc/apache2/ssl/abc.domain.com.crt
SSLCertificateKeyFile /etc/apache2/ssl/abc.domain.com.key


The SSL tab in ISPconfig has 3 fields:
- SSL Request
- SSL Certificate
- SSL Bundle

Which one does the SSL key file go in?
Which one does the SSL CSR file go in?
And does the SSL cert (*.crt) go in the SSL Certificate box?

Thanks in advance.
Reply With Quote
Sponsored Links
  #2  
Old 31st May 2011, 12:13
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,814
Thanks: 821
Thanked 5,339 Times in 4,188 Posts
Default

Quote:
Which one does the SSL key file go in?
The ssl key is generated and managed by ispconfig, so there is no field for it. Just createa new ssl cert trough ispconfig and then use the csr that ispconfig created for you and let it sign from the ssl authority.

So the steps to enable ssl for a website are:

1) Check the ssl checkbox in the site settings.
2) Create a new self signed ssl cert in ispconfig on the ssl tab.
3) Let the csr sign from a ssl authority and paste the cert into the sl cert field and choose save.

All ssl authorities lat you resign a cert, so you could reissue your cert based on the ispconfig csr.

Thats also described in detail in the ispconfig 3 manual.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 31st May 2011, 12:54
snowfly snowfly is offline
Member
 
Join Date: Jul 2006
Posts: 90
Thanks: 0
Thanked 4 Times in 3 Posts
 
Default

Thanks Till.

I managed to get the SSL working using the current SSL key/crt files.
As I had no option to re-create a new CSR/CRT, as this would have cost.

I put the current *.crt and *.key files into the sites /ssl/ directory on the ISPconfig server.
And enabled 'ssl' in the site options.

This worked, and ispconfig created the following entries in the apache2 site file:
SSLEngine on
SSLCertificateFile /var/www/clients/client100000/web2222/ssl/xxx.crt
SSLCertificateKeyFile /var/www/clients/client100000/web2222/ssl/xxx.key
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig 3 - CentOS 5.4 - SSL Problems!?! owainbaber Installation/Configuration 4 26th July 2011 17:12
Creating a SSL certificate - Quick guide SamTzu Tips/Tricks/Mods 22 4th January 2011 13:38
Is my postfix is hacked? bzzik Server Operation 21 15th July 2009 14:13
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
Strato Server - Restoring with SystemImager popper2001 HOWTO-Related Questions 5 28th July 2007 10:18


All times are GMT +2. The time now is 21:19.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.