Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #11  
Old 13th January 2011, 18:10
rogeriosjr rogeriosjr is offline
Junior Member
 
Join Date: Oct 2010
Posts: 16
Thanks: 0
Thanked 1 Time in 1 Post
Default

Into: /var/log/httpd/ssl_error_log

[Wed Jan 12 09:06:17 2011] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Jan 12 09:06:17 2011] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?

Can't see any other error.

Rogerio Siviero Jr.
Reply With Quote
Sponsored Links
  #12  
Old 13th January 2011, 20:31
rogeriosjr rogeriosjr is offline
Junior Member
 
Join Date: Oct 2010
Posts: 16
Thanks: 0
Thanked 1 Time in 1 Post
Default

See the error message from client web browser at attached file "ssl-errorIE.png"

Regards

Rogerio Siviero Jr.
Attached Images
 
Reply With Quote
  #13  
Old 14th January 2011, 14:04
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,711
Thanks: 1,900
Thanked 2,702 Times in 2,545 Posts
Default

http://wiki.cacert.org/FAQ/Technical...self-signed.3F

Also, it seems you created the certificate for localhost.localdomain instead of for your real domain.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #14  
Old 15th January 2011, 23:24
rogeriosjr rogeriosjr is offline
Junior Member
 
Join Date: Oct 2010
Posts: 16
Thanks: 0
Thanked 1 Time in 1 Post
Default

Problem solved.

I defined an exclusive IP address and reviewed that other websites were not using the same IP and all worked fine.

In my case, as I was using a private IP address to ispconfig server (my firewall redirect our public IPs to internal servers - NAT) and I had to add an additional private IP to this ispconfig server and define it to be used exclusively to the SSL website.
In the beginning I was configuring my SSL website to use the public IP address, but I realized that I needed to configure it with the private IP address and not with that public one.

Thanks!
Rogerio Siviero Jr.
Reply With Quote
The Following User Says Thank You to rogeriosjr For This Useful Post:
falko (16th January 2011)
  #15  
Old 25th May 2012, 20:29
tester10 tester10 is offline
Junior Member
 
Join Date: May 2012
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Default ssl problem configuring website

Hi lads

quick question

i have got ispconfig 3.4.5 latest version running, i have setup a few websites

none of them use SSL at the moment, but as i have seen the feature in the manual and also available in my control panel i have decided to make some testing


i have selected the option ssl whilst adding the new website, and also went to the ssl config page and have filled out all information , estate, country, address, deparment etc, afterall i have selected option Create ssl and pressed save.

so far so good i can also navigate via FTP in to the new website folder and i can see the ssl certificates etc.

but when i try to login to website with https://xxxxxxxx it gives me a error

on my mozilla firefox, as i know its not mozilla firefox as i have configured ISPPanel webif to use https and it works fine , so as other sites also with https.

but on my newly site created for testing it comes up the following message



SSL received a registration that exceede the max lenght size permitted.

(error code: ssl_error_rx_record_too_long)

Does anyone have ideas of what i am doing wrong ?? also do i need to edit something in the ETC/apache2/sites enabled config for my new site?
if so how shall i do it in order to get the new site working ok with ssl?

Any help will be appreciated lads, and sorry for any newby kind of question as i have been just running isp litle under 6months so still learning as it goes by.

P.S - I have tested opening the new site withou ssl and it opens ok http://xxx

thxs
tester100
Reply With Quote
  #16  
Old 29th May 2012, 12:14
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,711
Thanks: 1,900
Thanked 2,702 Times in 2,545 Posts
Default

Quote:
Originally Posted by tester10 View Post
i have selected the option ssl whilst adding the new website, and also went to the ssl config page and have filled out all information , estate, country, address, deparment etc, afterall i have selected option Create ssl and pressed save.
What exactly did you fill in? Maybe you put something invalid there which resulted in an invalid cert.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #17  
Old 3rd August 2012, 16:19
moglia moglia is offline
Member
 
Join Date: Apr 2009
Posts: 89
Thanks: 6
Thanked 13 Times in 10 Posts
 
Exclamation Steps to Generate a ceacert.org to ispconfig

I read it for find a solution: http://wiki.cacert.org/SimpleApacheCert
  • 1 Go To Sites --> Websites;
  • 2 Select web site as you want click on checkbox to enable ssl and click on save;
  • 3 Goto SSL Tab on the website and create certificate and click on save and wait a little time to ispconfig generate the cert;
  • 4 Back to SSL Tab on the website on first box get the -----BEGIN CERTIFICATE REQUEST----- content on the first box and copy to your memory or paste on a text editor temporally;
  • 5 Add and validate the domain on domain part of cacert.org;
  • 6 On new server cert click on new cert and paste previous certificate request information.;
  • 7 Get the certificate generated info and copy it on text editor;
  • 8 Get the CAcert_chain.pem (download link below) content and copy it on text editor;
  • 9 Back to SSL session on your domain at ispconfig;
  • 10 Paste the certificate generated info Certificate Box (Second Box);
  • 11 Paste the CAcert_chain.pem content into SSL Bundle (Latest Box);
  • 12 Finaly, select save certificate on ssl action combo and click on save button;

For Cacert:
The Bundle You Get Here:
http://wiki.cacert.org/SimpleApacheC...cert_chain.pem
Reply With Quote
Reply

Bookmarks

Tags
ispconfig 3, ssl, website

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
PHP warnings after upgrade to ISP config 3.03 stevegjacobs Installation/Configuration 5 30th October 2010 14:31
ISPconfig 3: can't send or receive messages zogthegreat Installation/Configuration 6 22nd May 2010 14:45
SSL Certificate will not work owainbaber Installation/Configuration 11 20th February 2010 23:06
Configuring SSL Certificate rvakili Installation/Configuration 3 15th June 2009 21:00
Help installing an SSL certificate james@thereidsonline.com Installation/Configuration 1 26th June 2007 18:11


All times are GMT +2. The time now is 19:43.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.