Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 8th October 2008, 06:26
dayjahone dayjahone is offline
Senior Member
 
Join Date: Jan 2007
Posts: 421
Thanks: 31
Thanked 0 Times in 0 Posts
Default GoDaddy SSL Certificates and ISPConfig

There are a lot of posts about this but none from the beginning, so I'm still really confused.

I bought an SSL certificate from godaddy. I enabled SSL on the website I want to be secure, gave godaddy the top portion of text, and they gave me two files:

1) gd_bundle.crt
2) www.mydomain.com.crt

...with the following instructions for installing the certificate:

Code:
Open the Apache ssl.conf file and add the following directives:
SSLCertificateFile /path to certificate file/your issued certificate
SSLCertificateKeyFile /path to key file/your key file
SSLCertificateChainFile /path to intermediate certificate/null
Save your ssl.conf file and restart Apache.
I basically ignored these instructions and uploaded the two files they gave me to the site's SSL directory.

I then added the following to the directives space on the website:

Code:
SSLCertificateChainFile/var/www/web#/ssl/gd_intermediate_bundle.crt
Am I missing something? It still fails when I try and restart apache.

Can it use the same IP address as everything else on the server?

PLEASE help. This is driving me nuts.
Reply With Quote
Sponsored Links
  #2  
Old 8th October 2008, 08:49
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,380
Thanks: 833
Thanked 5,480 Times in 4,314 Posts
Default

1) Create a self signed certificate in ISPConfig.
2) Take the certificate request which is shown in the ispconfig interface then and let it sign by godaddy.
3) The certificate (crt) that you receive as result of the signung process has to be pasted into the certificate field in ispconfig and then select save certificate as action. Be aware that only a certificate will work ere the ecrtificate request has been generated by ISPConfig.
4) upload the intermediate file to the ssl directory of the website and add the line:

SSLCertificateChainFile /var/www/web#/ssl/gd_intermediate_bundle.crt

to the apache directives field. In the line you posted above there is a space missing after SSLCertificateChainFile.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 8th October 2008, 17:29
dayjahone dayjahone is offline
Senior Member
 
Join Date: Jan 2007
Posts: 421
Thanks: 31
Thanked 0 Times in 0 Posts
Default

It seems to be working if I go to https://www.mydomain.com, but if I go to port 81 (https://www.mydomain.com:81/ for ISPConfig and webmail) it uses the old certificate. I'd like it to use the certificate I purchased for the site.

Last edited by dayjahone; 9th October 2008 at 02:16.
Reply With Quote
  #4  
Old 9th October 2008, 18:07
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,743 Times in 2,577 Posts
Default

The SSL cert for the ISPConfig interface is located in /root/ispconfig/httpd/ssl.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 10th October 2008, 00:31
dayjahone dayjahone is offline
Senior Member
 
Join Date: Jan 2007
Posts: 421
Thanks: 31
Thanked 0 Times in 0 Posts
Default

Do I just copy the intermediate bundle and the cert. there? Then what? Do I need the cert. in both places? They are both the same domain.
Reply With Quote
  #6  
Old 11th October 2008, 19:32
dayjahone dayjahone is offline
Senior Member
 
Join Date: Jan 2007
Posts: 421
Thanks: 31
Thanked 0 Times in 0 Posts
Default

I guess I just need instructions on how to set up a certificate for the ISPConfig login and use the same certificate for other pages on that domain.
Reply With Quote
  #7  
Old 13th October 2008, 10:21
Grey Grey is offline
Member
 
Join Date: May 2008
Location: Germany
Posts: 70
Thanks: 9
Thanked 18 Times in 15 Posts
Default

Quote:
in both places? They are both the same domain.
It doesn't matter that both are the same domain. They are running with two different apache instances (the one for the system on port 80 and ispconfig's own on port 81) and are therefore technically two different sites. The second one (ispconfig's own) doesn't yet know anything about a new certificate. Copy the cert to the location Falko gave in his post and modify /root/ispconfig/httpd/conf/httpd.conf accordingly.
Reply With Quote
  #8  
Old 17th April 2009, 19:23
bigger_travis bigger_travis is offline
Junior Member
 
Join Date: Oct 2005
Location: us
Posts: 25
Thanks: 0
Thanked 0 Times in 0 Posts
Default

thanks so much, i have been looking for a way to install a ssl i purchase with godaddy. im by no means a pro when it comes to programming, thats why i like your "Perfect" install tutorials. was inspired by them that i created my own tutorial to show people like me (beginners) how you can re-install godaddy ssl certificate into your ispconfig site.

tutorial is here: how to setup and install goddaddy ssl certificate with ispconfig

thanks
__________________
Free Wallpapers - Wallpaper Website Server. Trying to get my server
Reply With Quote
  #9  
Old 29th April 2009, 17:27
dpicella dpicella is offline
Senior Member
 
Join Date: Apr 2009
Posts: 116
Thanks: 9
Thanked 8 Times in 7 Posts
Exclamation The easiest way to use GoDaddy SSL with ISPConfig

I discovered a much easier way to do this!!

1. Generate your self signed certificate the normal way using ISPConfig 2 or 3
2. Paste your certificate request in the GoDaddy website
3. When GoDaddy asks you what type of server you are using (i.e., apache, CPanel, Plesk, Etc.) select "Other" - this is the most important step!!!
4. When you get the certificate download from GoDaddy it will not have an intermediate file. You can simply past the certificate they sent you in the certificate box and you are ready to go. You do not have to add any Apache server directives and you do not have to alter any conf files!

Cheers!
Reply With Quote
  #10  
Old 6th October 2009, 00:23
obrienj619 obrienj619 is offline
Junior Member
 
Join Date: Jun 2009
Posts: 4
Thanks: 0
Thanked 5 Times in 2 Posts
 
Default GoDaddy SSL Cert 256bit

I never actually found an article to install step by step GoDaddy SSL certs using 256bit encryption. I figured it out how to actually get an SSL cert working for a website located on my webserver running ISPConfig 2.2.33.

Please note the # symbols should represent your website number.

1. Create the SSL Cert using the ISPConfig Control Panel
2. SSH into ISPConfig Server
3. Move the 4 files created by ISPConfig Control Panel in the
/var/www/web#/ssl folder to a safe place in case you need to recover later.
4. Manually Generate the SSL Certs using OpenSSL
a. from the /var/www/web#/ssl folder type the following command:
openssl genrsa des3 out www.yourwebsite.com.key 2048
b. Create Your CSR to send to godaddy
openssl req new key www.yourwebsite.com.key out
www.yourwebsite.com.csr
c. Rename your key file
mv www.yourwebsite.com.key www.yourwebsite.key.org
d. Unencrypt your key file
openssl rsa in www.yourswebsite.com.key.org out
www.yourwebsite.com.key
5. Send your CSR to Godaddy for signing
6. Once you get your signed CSR you can upload the certificates into
the ssl directory. You will typically get two files:
www.yourwebsite.com.crt and gd_bundle.crt
7. Open Your ISPConfig Control Panel and under the main screen and
add the apache directive:
SSLCertificateChainFile /var/www/web#/ssl/gd_bundle.crt
8. Restart Apache using your ISPConfig Control Panel
9. Test your SSL cert using the https protocol on your website:
https://www.yourwebsite.com

Good Luck
Reply With Quote
The Following 4 Users Say Thank You to obrienj619 For This Useful Post:
makone (12th January 2010), oriongr (13th December 2009), till (6th October 2009), wa4bro (30th January 2010)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig and SSL Certificates phamels Installation/Configuration 48 2nd April 2009 18:33
Re-generating SSL certificates for ISPConfig Norman General 6 13th May 2008 19:27
Generating default ISPconfig SSL Certificates Again. spacemind Installation/Configuration 2 12th May 2008 13:14
cacert.org SSL Chained Certificates for Debian Etch steve1084 Suggest HOWTO 7 1st July 2007 13:32
how to use ISPconfig SSL certificates with courier unnilennium Installation/Configuration 3 8th April 2007 21:31


All times are GMT +2. The time now is 15:12.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.