#1  
Old 13th August 2009, 16:31
blocker blocker is offline
Senior Member
 
Join Date: Mar 2008
Posts: 177
Thanks: 9
Thanked 4 Times in 4 Posts
Default multiple ssl sites

Hello,

is it possible with some hardcore apache config change to have multiple ssl sites running on ispc2 server?
I have noticed that the ispc3 can do that.

Thanks!
Reply With Quote
Sponsored Links
  #2  
Old 13th August 2009, 17:05
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,083
Thanks: 826
Thanked 5,397 Times in 4,241 Posts
Default

You can run as many SSL sites in ispconfig 2 as you like. Just add as many IP addresses as you need SSL sites and then assign one IP per ssl site. Exactly as it is done in ispconfig 3.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
TheBirdMan (17th June 2010)
  #3  
Old 4th December 2009, 06:13
greenpete greenpete is offline
Member
 
Join Date: Feb 2008
Location: Cotswolds
Posts: 51
Thanks: 20
Thanked 1 Time in 1 Post
Send a message via Yahoo to greenpete
Default

Quote:
Originally Posted by till View Post
You can run as many SSL sites in ispconfig 2 as you like. Just add as many IP addresses as you need SSL sites and then assign one IP per ssl site. Exactly as it is done in ispconfig 3.
I guess by 'add as many IP addresses as you need' you mean internal IP's?
If so do you need to configure the routers firewall to point to port 80 as well as to the main IP of the server?
Thanks.
__________________
Running; The Perfect Setup - Ubuntu 9.04 Server
Talaen
Webmin
1GB CPU
375MB RAM
40GB HDD
Domestic ADSL 256kbs/8mbs
Speedtouch Modem/Router
Reply With Quote
  #4  
Old 4th December 2009, 12:55
Ben Ben is offline
Moderator
 
Join Date: Jul 2006
Posts: 1,029
Thanks: 7
Thanked 62 Times in 56 Posts
Default

No the external IP is meant or let's say the IP the browser will connect to.
So different ssl hosts are only possible if you can provide a different ip and port combination per cert, e.g.
1.2.3.4 Port 443 -> CERT1 / Host 1
1.2.3.4 Port "444" -> CERT 2 / Host 2
1.2.3.5 Port 443 -> CERT 3 / Host 3.

So in case you have your ispconfig behind a router you need to have as many official IPs as you need + forwarding / NATing them to the appropriate internal address.
Reply With Quote
The Following User Says Thank You to Ben For This Useful Post:
greenpete (5th December 2009)
  #5  
Old 5th December 2009, 00:43
greenpete greenpete is offline
Member
 
Join Date: Feb 2008
Location: Cotswolds
Posts: 51
Thanks: 20
Thanked 1 Time in 1 Post
Send a message via Yahoo to greenpete
Default

Quote:
Originally Posted by Ben View Post
No the external IP is meant or let's say the IP the browser will connect to.
So different ssl hosts are only possible if you can provide a different ip and port combination per cert, e.g.
1.2.3.4 Port 443 -> CERT1 / Host 1
1.2.3.4 Port "444" -> CERT 2 / Host 2
1.2.3.5 Port 443 -> CERT 3 / Host 3.

So in case you have your Ispconfig behind a router you need to have as many official IPs as you need + forwarding / NATing them to the appropriate internal address.
So let me get this straight, I have only one external IP address, but that's all I need?
I am behind a NAT firewall and I can port forward.
So I set up the website in question with it's own internal IP say 192.168.0.100 and I set the port in ISPConfig for that site to say 445, though I can't see where I would do that.
Then set a port forward on my router to send and requests for the domain in question to that port and ISPConfig will do the rest, have I got that right?
Thanks.
__________________
Running; The Perfect Setup - Ubuntu 9.04 Server
Talaen
Webmin
1GB CPU
375MB RAM
40GB HDD
Domestic ADSL 256kbs/8mbs
Speedtouch Modem/Router
Reply With Quote
  #6  
Old 5th December 2009, 15:09
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

The HTTPS port (443) is hardcoded in ISPConfig 2, so you cannot change it.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
The Following User Says Thank You to falko For This Useful Post:
greenpete (5th December 2009)
  #7  
Old 7th December 2009, 14:40
Ben Ben is offline
Moderator
 
Join Date: Jul 2006
Posts: 1,029
Thanks: 7
Thanked 62 Times in 56 Posts
Default

So in thise case you need more than one IP-Adresses to set up different ssl sites.
Another alternative would be the use only one ssl site and use this as proxy for others.
E.g. you have https://sslproxy.yourdomain.com and set up a proxy that proxies sth. like https://sslproxy.yourdomain.com/sslcuostmer1 to whatsoever internally.
Reply With Quote
The Following User Says Thank You to Ben For This Useful Post:
greenpete (8th December 2009)
  #8  
Old 22nd June 2010, 03:13
TheBirdMan TheBirdMan is offline
Junior Member
 
Join Date: Apr 2008
Posts: 28
Thanks: 8
Thanked 2 Times in 2 Posts
Default adding a second IP

Hi,

This is probably a silly question but I must be missing a step.

I configured a second public IP to point to a second private IP (ispconfig 2) on the same server. Added it under settings and then selected the site I want to use the additional ssl cert for.

10.0.0.1 -> 192.168.1.100 server1/website1
10.0.0.2 -> 192.168.1.101 server1/website2

Not working because it can't find the second private IP i addeed (can't ping it). Does it magically work under the primary IP or do I need to somehow add the second ip to the NIC?

Any help would be greatly appreciated.

Scott
Reply With Quote
  #9  
Old 22nd June 2010, 11:37
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,083
Thanks: 826
Thanked 5,397 Times in 4,241 Posts
Default

You have to add the second IP also to your network card, otherwise your server will not listen on that IP.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
TheBirdMan (22nd June 2010)
  #10  
Old 25th June 2010, 19:42
TheBirdMan TheBirdMan is offline
Junior Member
 
Join Date: Apr 2008
Posts: 28
Thanks: 8
Thanked 2 Times in 2 Posts
 
Default valid ssl cert for webmail

That worked great thanks,

One last question -

The sites in isp manager are using valid certs now but how do I replace the cert for webmail and secure mail https://mail.mydomain.com:81/webmail and ports 995 and 465? every things working with server generated certs but I need to replace them with a verified one.

Thank you guys again for your support,

Scott
Reply With Quote
The Following User Says Thank You to TheBirdMan For This Useful Post:
feeninuoumn (17th December 2013)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Apache2 and multiple SSL configs and name based virtual hosting Creator1326 Server Operation 11 5th October 2010 19:28
Can't enable SSL for sites in ISPConfig FeraTechInc General 7 7th December 2009 08:22
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
SSL Multiple domains Randy Installation/Configuration 6 15th September 2006 15:01
Multiple SSL sites on 1 server heat Server Operation 1 26th April 2005 13:05


All times are GMT +2. The time now is 02:52.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.