#1  
Old 5th August 2005, 10:39
boardmain boardmain is offline
Junior Member
 
Join Date: Aug 2005
Posts: 17
Thanks: 0
Thanked 0 Times in 0 Posts
Default Ssl

i can create only one certificate for ip?

i can't create for any domain?
Reply With Quote
Sponsored Links
  #2  
Old 5th August 2005, 10:40
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,446
Thanks: 813
Thanked 5,216 Times in 4,089 Posts
Default

Quote:
Originally Posted by boardmain
i can create only one certificate for ip?

i can't create for any domain?
Yes, thats a limitation in the Apache Webserver. Only one SSL enabled
vHost per IP.
Reply With Quote
  #3  
Old 8th August 2005, 07:07
KenMcGinnis KenMcGinnis is offline
Junior Member
 
Join Date: Aug 2005
Posts: 12
Thanks: 0
Thanked 0 Times in 0 Posts
Default I want a 'real' SSL Cert

I have everything installed and working ok - but it has that dummy cert. My web site name is server.domain.com. I want people to download some files and I need the site to show a 'real' certificate. I can get the cert files ok, Where can I put them?

My server is at 192.168.0.195. Can I put that in the SSL Cert request and have it work for all web sites on my server? If not, how can I do that? I would like all web sites to have the cert and use https://xxxxx.domain.com where xxxx can be anything?
Reply With Quote
  #4  
Old 8th August 2005, 09:00
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,722 Times in 2,563 Posts
Default

Quote:
Originally Posted by KenMcGinnis
I have everything installed and working ok - but it has that dummy cert. My web site name is server.domain.com. I want people to download some files and I need the site to show a 'real' certificate. I can get the cert files ok, Where can I put them?
The files are in /root/ispconfig/httpd/conf/ssl.*.

Quote:
Originally Posted by KenMcGinnis
My server is at 192.168.0.195. Can I put that in the SSL Cert request and have it work for all web sites on my server? If not, how can I do that? I would like all web sites to have the cert and use https://xxxxx.domain.com where xxxx can be anything?
You need a certificate for _each_ web site. But note that you can only have one SSL web site per IP address!
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 9th August 2005, 01:06
KenMcGinnis KenMcGinnis is offline
Junior Member
 
Join Date: Aug 2005
Posts: 12
Thanks: 0
Thanked 0 Times in 0 Posts
Default

I have 2 dsl connections with 2 ip addresses and 2 lan cards in my server. Each dsl router opens ports to one of the lan cards.

Can I have 2 SSL certificates since I have 2 IP addresses?

One problem I have noticed is that I can only have one default gateway (when I set it for one lan card, it automatically sets the same value for the other lan card)
Reply With Quote
  #6  
Old 9th August 2005, 09:19
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,722 Times in 2,563 Posts
Default

Quote:
Originally Posted by KenMcGinnis
Can I have 2 SSL certificates since I have 2 IP addresses?
Yes, one for each IP address.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #7  
Old 9th August 2005, 20:01
KenMcGinnis KenMcGinnis is offline
Junior Member
 
Join Date: Aug 2005
Posts: 12
Thanks: 0
Thanked 0 Times in 0 Posts
Default Two SSL Certs with 2 IP addresses

Sorry if I am asking basic questions, but I do not have much time in with Linux. I set up an apache2 server with SuSE 9.0 about 18 months ago using a cookbook (which I can't find anymore). The system never went down or had a single problem so I lost all my notes and forgot how I did things. I have ispconfig running just fine now with 4 resellers and about 16 clients. One of the clients must have ssl for file http downloads (and 3 others are probably going to require it).

You said (above) where to put the cert files and I did that and it works. But how to put a 2nd one? if I name it server.key/crt, it will write over the 1st one?
Reply With Quote
  #8  
Old 9th August 2005, 20:06
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,446
Thanks: 813
Thanked 5,216 Times in 4,089 Posts
Default

Quote:
Originally Posted by KenMcGinnis
Sorry if I am asking basic questions, but I do not have much time in with Linux. I set up an apache2 server with SuSE 9.0 about 18 months ago using a cookbook (which I can't find anymore). The system never went down or had a single problem so I lost all my notes and forgot how I did things. I have ispconfig running just fine now with 4 resellers and about 16 clients. One of the clients must have ssl for file http downloads (and 3 others are probably going to require it).

You said (above) where to put the cert files and I did that and it works. But how to put a 2nd one? if I name it server.key/crt, it will write over the 1st one?
If you have ISPConfig installed you dont have to make SSL-Certificates manually, just use the functions in ISPConfig. ISPConfig takes care where to store the certificate files and make the correct entries in the vhost configuration.
Reply With Quote
  #9  
Old 9th August 2005, 22:33
KenMcGinnis KenMcGinnis is offline
Junior Member
 
Join Date: Aug 2005
Posts: 12
Thanks: 0
Thanked 0 Times in 0 Posts
Default Ssl

Thanks that worked, pretty easy. This is a pretty powerful interface.

I found the cert it made - in /srv/www in that client location. I guess if I send the code off somewhere and get a regular certificate, I can paste it in the crt window and save and that will do it?
Reply With Quote
  #10  
Old 9th August 2005, 22:54
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,722 Times in 2,563 Posts
 
Default

Quote:
Originally Posted by KenMcGinnis
Thanks that worked, pretty easy. This is a pretty powerful interface.

I found the cert it made - in /srv/www in that client location. I guess if I send the code off somewhere and get a regular certificate, I can paste it in the crt window and save and that will do it?
You can send the code from the "SSL Request" textarea in the ISPConfig interface to a Certificate Authority (CA) like instantssl.com. The certificate you get back has to be copied to the "SSL Certificate" textarea, and under "Action" you choose "Save certificate" and click on "Save". That's it.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 04:08.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.