#1  
Old 15th January 2008, 15:59
msource msource is offline
Member
 
Join Date: May 2007
Posts: 58
Thanks: 0
Thanked 0 Times in 0 Posts
Default SSL Certificates

Hi,

I'm whant to know how the SSL for eache IP Work.

I have the following configuration on my network:

DMZ Zone:
My Server (icaro.liz-online.pt)
Private IP: 192.168.186.40
Public IP: 62.48.192.43

How do i configure my server/ispconfig to work whit more than one ip because of the SSL Certificates?

I dont wont to use Multi-IP SSL.
Reply With Quote
Sponsored Links
  #2  
Old 15th January 2008, 17:45
Hans Hans is offline
Moderator
 
Join Date: Dec 2005
Location: Montfoort, The Netherlands
Posts: 2,256
Thanks: 210
Thanked 648 Times in 294 Posts
Send a message via Skype™ to Hans
Default

Add the additional IP-addresses in ISPConfig within the IP-list (one per line).

Please also have a look here: http://www.howtoforge.com/faq/14_49_en.html

And add additional ip-addresses within /etc/network/interfaces

# 1st additional IP-address:
auto eth0:0
iface eth0:0 inet static
address ip-address 2
netmask <value>
network <value>
gateway <value>
broadcast <value>

Restart your network afterwards
__________________
Hans

BB-Hosting | Quality Web Hosting since 2005
Reply With Quote
  #3  
Old 15th January 2008, 18:37
msource msource is offline
Member
 
Join Date: May 2007
Posts: 58
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Tanks for the quick anwser.

1 - I Have the Public IP: 62.48.192.43 aplied to the Private IP: 192.168.186.40
2 - I i configured for exemple mor 10 Private IP's (192.168.186.40 - 192.168.50), i need to associete another Public IP? What can i do?
3 - How do the ssl certificate whork on the mather?

Tanks for all you efford, and sorry for this lame questions.
Reply With Quote
  #4  
Old 15th January 2008, 18:43
msource msource is offline
Member
 
Join Date: May 2007
Posts: 58
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Another thing,

Could i just have one Ethernet Card or i have to buy varios Ethernet Cards?
Reply With Quote
  #5  
Old 15th January 2008, 23:30
Hans Hans is offline
Moderator
 
Join Date: Dec 2005
Location: Montfoort, The Netherlands
Posts: 2,256
Thanks: 210
Thanked 648 Times in 294 Posts
Send a message via Skype™ to Hans
Default

Even with one Networkcard you are able to use more than one IP-address.
Define these additional (internal) IP-addresses within your /etc/network/interfaces as i show you here:

# 1st additional IP-address:
auto eth0:0
iface eth0:0 inet static
address 192.168.186.41
netmask <value>
network <value>
gateway <value>
broadcast <value>

# 2st additional IP-address:
auto eth0:1
iface eth0:0 inet static
address 192.168.186.42
netmask <value>
network <value>
gateway <value>
broadcast <value>

and so on.


Add these internal IP-addresses also within the IP-list within ISPConfig then you're able to use a SSL certificate for every site with an own internal IP-address.
__________________
Hans

BB-Hosting | Quality Web Hosting since 2005

Last edited by Hans; 15th January 2008 at 23:33.
Reply With Quote
  #6  
Old 16th January 2008, 19:38
msource msource is offline
Member
 
Join Date: May 2007
Posts: 58
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Hi,

Tanks for you quick and nice anwser.

I was able to configure 4 Ip's on the same machine and the Certificates work very nice, but i have one question.

For each Private IP that i configure to SSL domain, i have to associate a new Public IP, correct?

Ex:
192.168.186.50 -- 62.48.192.45
192.168.186.51 -- 62.48.192.46
192.168.186.52 -- 62.48.192.47

All of this IP's are in the same machine.

Last edited by msource; 16th January 2008 at 19:43.
Reply With Quote
  #7  
Old 17th January 2008, 09:25
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,573
Thanks: 792
Thanked 4,980 Times in 3,901 Posts
Default

Quote:
For each Private IP that i configure to SSL domain, i have to associate a new Public IP, correct?
Yes, thats correct.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #8  
Old 18th January 2008, 11:07
msource msource is offline
Member
 
Join Date: May 2007
Posts: 58
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default

Hi,

Guy's your thes best.
The SSL certificates work fine and easy whit this configuration.

One question, the SSL Certificates consume a lot of resources from the machine?

Very tanks for all your help.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig and SSL Certificates phamels Installation/Configuration 48 2nd April 2009 18:33
SSL certificates teves Installation/Configuration 6 23rd June 2008 07:49
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
cacert.org SSL Chained Certificates for Debian Etch steve1084 Suggest HOWTO 7 1st July 2007 13:32
rebuild ssl certificates for domain change whitty Installation/Configuration 1 6th June 2006 12:12


All times are GMT +2. The time now is 01:42.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.