#1  
Old 25th April 2012, 14:01
marcelodelta marcelodelta is offline
Junior Member
 
Join Date: Mar 2012
Posts: 10
Thanks: 0
Thanked 0 Times in 0 Posts
Default SSL client configure. help

Good morning people,

I'm having a little trouble adding clients with ssl settings in the basic ISPConfig3.

Question.
How to configure SSL on clients?
It is necessary virtual IP?
What is the procedure?


Much obliged.
Reply With Quote
Sponsored Links
  #2  
Old 25th April 2012, 14:11
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,400
Thanks: 834
Thanked 5,493 Times in 4,324 Posts
Default

The steps are:

1) Assign a dedicated IP to the website if yiu want to use classic ssl, as sni is only supported by latest browsers.
2) Enable ssl ind the site and then create a ssl certificate on the ssl tab by entering the ssl details in the fileds and then selectin "create certificate" as action and pressing on the save button afterwards.

These steps are described in detail in the ispconfig manual too.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 25th April 2012, 16:02
marcelodelta marcelodelta is offline
Junior Member
 
Join Date: Mar 2012
Posts: 10
Thanks: 0
Thanked 0 Times in 0 Posts
Default

1) You could tell these sites that offer services to classic and SNI?

2) It could also inform the link to buy the ISPConfig manual is very interesting.

Thank you.
Reply With Quote
  #4  
Old 25th April 2012, 16:06
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,400
Thanks: 834
Thanked 5,493 Times in 4,324 Posts
Default

Please see here on details what sni is:

http://en.wikipedia.org/wiki/Server_Name_Indication

Classic SSL requires a dedicated IP address for each ssl website. With sni, several sites can share a IP address.

Regarding ISPConfig manual, please see ISPconfig.org Website:

http://www.howtoforge.com/download-t...onfig-3-manual
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 25th April 2012, 16:14
marcelodelta marcelodelta is offline
Junior Member
 
Join Date: Mar 2012
Posts: 10
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Informing you know where I can buy certificates SNI cheap?

I just bought the manual.
Reply With Quote
  #6  
Old 25th April 2012, 16:18
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,400
Thanks: 834
Thanked 5,493 Times in 4,324 Posts
Default

SSl certs for sni are normal ssl certs, so you dont have to get any special certificate type for that. If sni is supported or not depends on your webbrowser and apache version. Please see lists in the wikipedia article.

You can get free ssl certs from startssl:

http://www.startssl.com

Thanks for supporting the ispconfig development by buying a manual!
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #7  
Old 25th April 2012, 16:36
marcelodelta marcelodelta is offline
Junior Member
 
Join Date: Mar 2012
Posts: 10
Thanks: 0
Thanked 0 Times in 0 Posts
Default

On the start ssl how do I know about the type SNI.

I found the options of class1 and grade2, unless the type SNI


Thank you for your attention
Reply With Quote
  #8  
Old 25th April 2012, 22:32
marcelodelta marcelodelta is offline
Junior Member
 
Join Date: Mar 2012
Posts: 10
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Till

The certifying

domain_com.ca-bundle
7domain_com.crt

This certificate above may be used as is or SNI to generate a license specific to SNI?

The problem is that I did not find any company to produce these certificates.

I had a problem just now. I put in two different clients, different certificates. The server was offline.

I had to go in the vhosts file to delete the certificates manually in order to return to work.

Could you explain in more detail?

Last edited by marcelodelta; 26th April 2012 at 05:25.
Reply With Quote
  #9  
Old 26th April 2012, 08:58
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,400
Thanks: 834
Thanked 5,493 Times in 4,324 Posts
 
Default

Quote:
This certificate above may be used as is or SNI to generate a license specific to SNI?
Yes. Any ssl certificate can be used for sni.

Quote:
The problem is that I did not find any company to produce these certificates.
Off course, as every ssl certificate that you can by works with sni, so nobody advsertises this. Please see #6 in this thread.

Quote:
I had a problem just now. I put in two different clients, different certificates. The server was offline.
This can happen when your webserver ois not sni capable, see wikipedia article, or when the ssl cert and key do not match. This happens when the ssl cert is not based on the csr created by ispconfig.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
link my domain to my server, impossible! 007007 Installation/Configuration 7 17th January 2012 13:59
Need help with ISPConfig 3 Update midcarolina Installation/Configuration 36 8th November 2011 22:07
DNS Lookups kieron General 4 4th May 2011 19:49
Ubuntu 10.04 VS ISPConfig 2.2.37 Bicet Installation/Configuration 7 9th March 2011 15:58
Can't access to my website - after install problem pallermo Installation/Configuration 18 4th June 2010 13:29


All times are GMT +2. The time now is 15:17.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.