SSL client configure. help

[marcelodelta]

Good morning people,

I'm having a little trouble adding clients with ssl settings in the basic ISPConfig3.

Question.
How to configure SSL on clients?
It is necessary virtual IP?
What is the procedure?


Much obliged.

[till]

The steps are:

1) Assign a dedicated IP to the website if yiu want to use classic ssl, as sni is only supported by latest browsers.
2) Enable ssl ind the site and then create a ssl certificate on the ssl tab by entering the ssl details in the fileds and then selectin "create certificate" as action and pressing on the save button afterwards.

These steps are described in detail in the ispconfig manual too.

[marcelodelta]

1) You could tell these sites that offer services to classic and SNI?

2) It could also inform the link to buy the ISPConfig manual is very interesting.

Thank you.

[till]

Please see here on details what sni is:

http://en.wikipedia.org/wiki/Server_Name_Indication

Classic SSL requires a dedicated IP address for each ssl website. With sni, several sites can share a IP address.

Regarding ISPConfig manual, please see ISPconfig.org Website:

http://www.howtoforge.com/download-t...onfig-3-manual

[marcelodelta]

Informing you know where I can buy certificates SNI cheap?

I just bought the manual.

[till]

SSl certs for sni are normal ssl certs, so you dont have to get any special certificate type for that. If sni is supported or not depends on your webbrowser and apache version. Please see lists in the wikipedia article.

You can get free ssl certs from startssl:

http://www.startssl.com

Thanks for supporting the ispconfig development by buying a manual!

[marcelodelta]

On the start ssl how do I know about the type SNI.

I found the options of class1 and grade2, unless the type SNI


Thank you for your attention

[marcelodelta]

Till

The certifying

domain_com.ca-bundle
7domain_com.crt

This certificate above may be used as is or SNI to generate a license specific to SNI?

The problem is that I did not find any company to produce these certificates.

I had a problem just now. I put in two different clients, different certificates. The server was offline.

I had to go in the vhosts file to delete the certificates manually in order to return to work.

Could you explain in more detail?

[till]

This certificate above may be used as is or SNI to generate a license specific to SNI?

Yes. Any ssl certificate can be used for sni.

The problem is that I did not find any company to produce these certificates.

Off course, as every ssl certificate that you can by works with sni, so nobody advsertises this. Please see #6 in this thread.

I had a problem just now. I put in two different clients, different certificates. The server was offline.

This can happen when your webserver ois not sni capable, see wikipedia article, or when the ssl cert and key do not match. This happens when the ssl cert is not based on the csr created by ispconfig.