Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 1st July 2010, 19:24
TheBirdMan TheBirdMan is offline
Junior Member
 
Join Date: Apr 2008
Posts: 28
Thanks: 8
Thanked 2 Times in 2 Posts
Default trusted SSL cert for webmail?

Hello,

Is it possible to replace the server generated ssl cert with a purchased cert for webmail in ispconfig 2 ? I have a customer using an ipad for https webmail access and he can't connect because the cert is untrusted. I created a cert with the webmail server name and ip address but not sure where to put it or if that would be enough to even work.

Thanks,

Scott
Reply With Quote
Sponsored Links
  #2  
Old 2nd July 2010, 11:58
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,744 Times in 2,577 Posts
Default

Yes, you can generate a CSR as shown on http://www.howtoforge.com/forums/sho...58&postcount=4 and then buy a certificate with the help of this CSR.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
The Following User Says Thank You to falko For This Useful Post:
TheBirdMan (2nd July 2010)
  #3  
Old 8th July 2010, 17:46
id10t id10t is offline
Senior Member
 
Join Date: Nov 2008
Posts: 242
Thanks: 2
Thanked 22 Times in 22 Posts
Default

FYI StartSSL gives free certs...
__________________
I'm a very happy linode.com customer, I'm sure you will be too!
Reply With Quote
  #4  
Old 9th July 2010, 06:39
TheBirdMan TheBirdMan is offline
Junior Member
 
Join Date: Apr 2008
Posts: 28
Thanks: 8
Thanked 2 Times in 2 Posts
Default invalid RSA

Hi,

I modified the server.key2 to 2048 for the godaddy requirements but still get a invalid RSA when submitting. Am I overlooking something simple ?

Ps- I am now a paying subscriber to help with the cause.

Thanks for the info on startssl but this customer wants to stick with godaddy for now. I will check it out though.

Scott
Reply With Quote
The Following User Says Thank You to TheBirdMan For This Useful Post:
feeninuoumn (23rd December 2013)
  #5  
Old 9th July 2010, 08:30
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,421
Thanks: 834
Thanked 5,500 Times in 4,329 Posts
Default

Please update your server to ispconfig 2.2.36 and then recreate the sl cert in ispconfig and let it sign from godaddy. Manually editing the server.key2 file does not work as it will not affect the already created csr.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #6  
Old 13th July 2010, 18:42
TheBirdMan TheBirdMan is offline
Junior Member
 
Join Date: Apr 2008
Posts: 28
Thanks: 8
Thanked 2 Times in 2 Posts
Default

Does 2.2.36 then give me the option to create a webmail cert from within ispconfig or do I still use "openssl genrsa -des3 -passout pass: password -out /root/ispconfig/httpd/conf/ssl.key/server.key2 2048" ?

Scott
Reply With Quote
  #7  
Old 13th July 2010, 18:51
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,421
Thanks: 834
Thanked 5,500 Times in 4,329 Posts
Default

webmail is automatically encrypted with ssl when you used the https option for the ispconfig interface during setup.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
feeninuoumn (23rd December 2013)
  #8  
Old 13th July 2010, 19:26
TheBirdMan TheBirdMan is offline
Junior Member
 
Join Date: Apr 2008
Posts: 28
Thanks: 8
Thanked 2 Times in 2 Posts
Default valid cert for webmail

All we really want to do is be able to connect an ipad using https webmail but need a valid cert to do it. I have tried using the "openssl genrsa..." to generate a csr for godaddy but keep getting an invalid key error when submitting the server.key file it generated (maybe i'm doing it wrong).

Also - do we use the update manager to go to 2.2.36 from 2.2.35? and will the upgrade allow us to replace the webmail cert from within ispconfig?

Thanks, This is the last snafoo on this server.

Scott
Reply With Quote
  #9  
Old 14th July 2010, 17:01
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,744 Times in 2,577 Posts
Default

Quote:
Originally Posted by TheBirdMan View Post
Also - do we use the update manager to go to 2.2.36 from 2.2.35?
No - take a look here: http://www.howtoforge.com/forums/sho...90&postcount=1
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #10  
Old 24th July 2010, 02:08
TheBirdMan TheBirdMan is offline
Junior Member
 
Join Date: Apr 2008
Posts: 28
Thanks: 8
Thanked 2 Times in 2 Posts
 
Default https webmail valid cert ispconfig2

Hello. Its me again,

The upgrade did the trick and I was able to obtain the cert installing them in /root/ispconfig/httpd/conf/ssl.crt/ and removing the snakoil certs. It is still however not showing the valid cert i purchased when going to https://server:81/webmail. Do I need to also install any apache directives? in /root/ispconfig/httpd/conf/httpd.conf_https maybe ?

ps - that upgrade took a while, I didn't know I could hold my breath that long.

Thanks,

Scott
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Trusted SSL admins Installation/Configuration 2 24th February 2010 21:28
SSL Cert for site filch General 3 10th December 2008 13:49
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
New SSL Cert PoleCat Installation/Configuration 15 4th July 2007 10:13
Can't get SSL Cert to work rbartz Installation/Configuration 4 23rd April 2006 09:32


All times are GMT +2. The time now is 07:53.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.