Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 6th October 2010, 18:46
jon jon is offline
Member
 
Join Date: Jan 2007
Location: Canada
Posts: 87
Thanks: 12
Thanked 5 Times in 5 Posts
Send a message via Skype™ to jon
Default Separate IP and SSL for a Customer

I have an ISPConfig 3 server running with several clients. One of the clients needs an SSL certificate, so I have assigned them a separate static IP. I'm wondering what the proper ISPConfig way to set this up is. Of course I don't want any other clients to be able to select (or see would be even better) this IP. Can someone guide me the right way? I've done SSL sites with Apache2 many many times, but would like to stick to the ISPConfig way so things don't get messed up on an upgrade (that's happened once already). Thanks in advance.
Reply With Quote
Sponsored Links
  #2  
Old 6th October 2010, 19:09
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,717
Thanks: 820
Thanked 5,322 Times in 4,175 Posts
Default

If you create the websites as admin user for your clients, then no client can change the settings on the first tab like the IP address.

So the steps are:

1) Login as admin user and create the website for this client.
2) select the IP, enable the ssl checkbox, then go to the ssl tab and enter the details for the ssl cert and select create as action and click on save. After a few minutes, go back zo the site and you will find the sl csr and self signed crt in the fields on the ssl tab.
3) If you want a officially signed ssl cert, take the sl csr, let it sign by a ssl authority and copy the ssl crt that you get back into the ssl crt field and select save as action.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 7th October 2010, 14:53
jon jon is offline
Member
 
Join Date: Jan 2007
Location: Canada
Posts: 87
Thanks: 12
Thanked 5 Times in 5 Posts
Send a message via Skype™ to jon
Default

That sounds good, but for adding the IP address, do I go in to System -> Server IP addresses and add both the mail IP and the customers IP there?
Reply With Quote
  #4  
Old 8th October 2010, 08:20
DUCKFACE DUCKFACE is offline
Member
 
Join Date: Dec 2008
Location: Bulgaria
Posts: 92
Thanks: 2
Thanked 2 Times in 2 Posts
Default for example ?

following Your steps ...
i have 2 sites a.com and b.com. On a.com i have ssl cert. so i have https://a.com. when i access https://b.com with my browser i got https://b.com in address bar .. but i enter in https://a.com
any idea ?
________
Portable Vaporier Review
________
Pot news
________
LovelyWendie99

Last edited by DUCKFACE; 12th May 2011 at 03:08.
Reply With Quote
  #5  
Old 8th October 2010, 10:00
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,717
Thanks: 820
Thanked 5,322 Times in 4,175 Posts
Default

Quote:
Originally Posted by jon View Post
That sounds good, but for adding the IP address, do I go in to System -> Server IP addresses and add both the mail IP and the customers IP there?
The email system does not realy on IP adresses for accounts. So there is no email IP. IP Adresses ae for websites (apache) only.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #6  
Old 8th October 2010, 10:02
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,717
Thanks: 820
Thanked 5,322 Times in 4,175 Posts
Default

Quote:
Originally Posted by DUCKFACE View Post
following Your steps ...
i have 2 sites a.com and b.com. On a.com i have ssl cert. so i have https://a.com. when i access https://b.com with my browser i got https://b.com in address bar .. but i enter in https://a.com
any idea ?
Thats correct and the normal bahviour of the apache webserver. İou can use the SSL IP for only one website. So no other website may use this IP for http or https. This is not ispconfig specific, it is the way that ssl works.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #7  
Old 9th October 2010, 09:16
DUCKFACE DUCKFACE is offline
Member
 
Join Date: Dec 2008
Location: Bulgaria
Posts: 92
Thanks: 2
Thanked 2 Times in 2 Posts
Default how to ?

okey Till .. I agree with u ... but how can i have more than one ssl site per machine ? (per IP)?
________
BUY VAPORIZERS
________
AVALON (CONCEPT)
________
Lovely Wendie99

Last edited by DUCKFACE; 12th May 2011 at 03:08.
Reply With Quote
  #8  
Old 9th October 2010, 09:58
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,717
Thanks: 820
Thanked 5,322 Times in 4,175 Posts
Default

You have to add as many IP addresses as you want to have SSL records on that machine. Please see SSL specification RFC for details. Thats not specific to ispconfig.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #9  
Old 9th October 2010, 18:16
jon jon is offline
Member
 
Join Date: Jan 2007
Location: Canada
Posts: 87
Thanks: 12
Thanked 5 Times in 5 Posts
Send a message via Skype™ to jon
Default

Quote:
Originally Posted by till View Post
The email system does not realy on IP adresses for accounts. So there is no email IP. IP Adresses ae for websites (apache) only.
Sorry, that should have read main, not mail
Reply With Quote
  #10  
Old 9th October 2010, 18:34
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,717
Thanks: 820
Thanked 5,322 Times in 4,175 Posts
 
Default

Quote:
Originally Posted by jon View Post
Sorry, that should have read main, not mail
All IP-Adresses that should be used for websites (vhosts) have to be added there incl. the main IP of the server.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
jon (13th October 2010)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 21:40.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.