Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Thread Tools Display Modes
Old 10th July 2012, 15:49
Nap Nap is offline
Senior Member
Join Date: Oct 2006
Posts: 168
Thanks: 11
Thanked 3 Times in 3 Posts
Default ISPConfig has 'extra' attributes not covered in the manual


I'm presently installing ISPConfig3.0.4.6 on my server.
During the install, a number of questions are asked. One that is't covered in the manual is:

Please enter the following 'extra' attributes to be sent with your certificate request
A challenge password []:

I presume this is similar to the 'passphrase' that is used in SSH RSA keys?
Where is it used? Who needs to know it? Is it safe to leave blank?


(Thought I better post in the right forum to get an answer quicker. Please delete the thread, if possible, in the Linux forum)
Reply With Quote
Sponsored Links
Old 10th July 2012, 18:35
dclardy dclardy is offline
Senior Member
Join Date: Sep 2009
Location: Dallas, TX
Posts: 347
Thanks: 10
Thanked 50 Times in 28 Posts

This is part of the SSH key generation for the control panel. You can leave it blank.
Reply With Quote
Old 11th July 2012, 02:57
Nap Nap is offline
Senior Member
Join Date: Oct 2006
Posts: 168
Thanks: 11
Thanked 3 Times in 3 Posts

thnx dclardy,

I've done that in the past, but only for a key that I use personally.

Presumably, by using a passphrase, the cryptographic strength of the key is significantly increased, and as individuals, we all have our own perspective on how secure something is or should be.
So, in the context of installing ISPConfig3.0.4.6, if I don't leave it blank, who needs to know the passphrase? Is this certificate being generated for resellers and clients, or just me as the administrator?

I can't wait any longer, so I'm proceeding with my install on the basis that I can save the database contents and reinstall if I've made a blunder here.

True to the heading 'extra' attributes; the password is not the only new field I need to fill.

Now I need to supply 'An optional company name'. I'm going to use the name of my business.

Last edited by Nap; 11th July 2012 at 04:27. Reason: Further 'extra' attributes need explaination
Reply With Quote
Old 11th July 2012, 11:11
till till is offline
Super Moderator
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,015
Thanks: 840
Thanked 5,652 Times in 4,461 Posts

New versions of the manual are published for every major ISPConfig release (3.0.3, 3.0.4, 3.0.5) and not for minor releases. If a function has been added in a minor release, it will be covered in the manual of the next major release.

You can see the release date and version umber for which a manual is on the ispconfig.org manual page:

Till Brehm
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Old 11th July 2012, 12:22
cfoe cfoe is offline
ISPConfig Developer
Join Date: Oct 2011
Location: NRW, Germany
Posts: 233
Thanks: 27
Thanked 57 Times in 32 Posts
Send a message via Skype™ to cfoe

Both fields are totally normal for the generation of SSL certificate request.

If you want to generate a request to buy a cert from a CA then you should look at their FAQs. Some need you to leave both fields blank.

As a rule of thumb I would say leave them blank all the time.
The complete cert will not display them and they can only be in the way if you want to buy a cert.
Christian Foellmann

OpenSource-Projects - GitHub-Projects - SVN-Mirrors on GitHub - Foe Services
Reply With Quote


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Ubuntu 11.10, ISPConfig needs some nginx.conf tweaks after following guide. talkingnews Installation/Configuration 10 28th November 2011 22:55
Ftp problems timeout reny2000 General 6 23rd December 2009 12:09
ISPConfig kills extra proccesses? GerShock General 1 4th December 2009 11:24
ISPConfig Beta released till General 78 24th December 2008 12:47
Extra domains with ISPConfig on server TheRudy General 6 16th April 2006 15:21

All times are GMT +2. The time now is 07:36.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.