Ssl

[boardmain]

i can create only one certificate for ip?

i can't create for any domain?

[till]

Originally Posted by boardmain

i can create only one certificate for ip?

i can't create for any domain?

Yes, thats a limitation in the Apache Webserver. Only one SSL enabled
vHost per IP.

[KenMcGinnis]

I have everything installed and working ok - but it has that dummy cert. My web site name is server.domain.com. I want people to download some files and I need the site to show a 'real' certificate. I can get the cert files ok, Where can I put them?

My server is at 192.168.0.195. Can I put that in the SSL Cert request and have it work for all web sites on my server? If not, how can I do that? I would like all web sites to have the cert and use https://xxxxx.domain.com where xxxx can be anything?

[falko]

Originally Posted by KenMcGinnis

I have everything installed and working ok - but it has that dummy cert. My web site name is server.domain.com. I want people to download some files and I need the site to show a 'real' certificate. I can get the cert files ok, Where can I put them?

The files are in /root/ispconfig/httpd/conf/ssl.*.

Originally Posted by KenMcGinnis

My server is at 192.168.0.195. Can I put that in the SSL Cert request and have it work for all web sites on my server? If not, how can I do that? I would like all web sites to have the cert and use https://xxxxx.domain.com where xxxx can be anything?

You need a certificate for _each_ web site. But note that you can only have one SSL web site per IP address!

[KenMcGinnis]

I have 2 dsl connections with 2 ip addresses and 2 lan cards in my server. Each dsl router opens ports to one of the lan cards.

Can I have 2 SSL certificates since I have 2 IP addresses?

One problem I have noticed is that I can only have one default gateway (when I set it for one lan card, it automatically sets the same value for the other lan card)

[falko]

Originally Posted by KenMcGinnis

Can I have 2 SSL certificates since I have 2 IP addresses?

Yes, one for each IP address.

[KenMcGinnis]

Sorry if I am asking basic questions, but I do not have much time in with Linux. I set up an apache2 server with SuSE 9.0 about 18 months ago using a cookbook (which I can't find anymore). The system never went down or had a single problem so I lost all my notes and forgot how I did things. I have ispconfig running just fine now with 4 resellers and about 16 clients. One of the clients must have ssl for file http downloads (and 3 others are probably going to require it).

You said (above) where to put the cert files and I did that and it works. But how to put a 2nd one? if I name it server.key/crt, it will write over the 1st one?

[till]

Originally Posted by KenMcGinnis

Sorry if I am asking basic questions, but I do not have much time in with Linux. I set up an apache2 server with SuSE 9.0 about 18 months ago using a cookbook (which I can't find anymore). The system never went down or had a single problem so I lost all my notes and forgot how I did things. I have ispconfig running just fine now with 4 resellers and about 16 clients. One of the clients must have ssl for file http downloads (and 3 others are probably going to require it).

You said (above) where to put the cert files and I did that and it works. But how to put a 2nd one? if I name it server.key/crt, it will write over the 1st one?

If you have ISPConfig installed you dont have to make SSL-Certificates manually, just use the functions in ISPConfig. ISPConfig takes care where to store the certificate files and make the correct entries in the vhost configuration.

[KenMcGinnis]

Thanks that worked, pretty easy. This is a pretty powerful interface.

I found the cert it made - in /srv/www in that client location. I guess if I send the code off somewhere and get a regular certificate, I can paste it in the crt window and save and that will do it?

[falko]

Originally Posted by KenMcGinnis

Thanks that worked, pretty easy. This is a pretty powerful interface.

I found the cert it made - in /srv/www in that client location. I guess if I send the code off somewhere and get a regular certificate, I can paste it in the crt window and save and that will do it?

You can send the code from the "SSL Request" textarea in the ISPConfig interface to a Certificate Authority (CA) like instantssl.com. The certificate you get back has to be copied to the "SSL Certificate" textarea, and under "Action" you choose "Save certificate" and click on "Save". That's it.