#1  
Old 25th July 2006, 15:15
simplyworks simplyworks is offline
Junior Member
 
Join Date: Jul 2006
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
Default Client Certificate

Hello,

I created a client required certificate to protect the Intranet folder on the web site, so the employees do not need to remember a password to access the intranet from home. They just install the certificate. This is the last piece I needs to move to the new server. (Fedora Core 5 with ISPconfig)

The problem is, I created a folder call "intranet" in /root/ispconfig/openssl/ssl/
I then install my cacert.pem and made the change in the apache config file to include the webapp.d file.

This file contains the folder directive to require the client certificate
<directory "/xxx/xxx/xxx/intranet">
SSLRequireSSL
SSLVerifyClient require
SSLCAcertificateFile /root/ispconfig/openssl/ssl/intranet
</directory>

When I restart ispconfig, I get an error stating I can not put the ssl in this location.

So, I tried /etc/ssl/intranet and got the same result.

Where do I need to install this cacert.pem in the folder stucture?

thanks,
Ja
Reply With Quote
Sponsored Links
  #2  
Old 26th July 2006, 08:42
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,478
Thanks: 813
Thanked 5,255 Times in 4,121 Posts
Default

Is your intranet folder on the ISPConfig webserver on port 81 or on your "normal" webserver port 81 / 443 ?
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 26th July 2006, 14:04
simplyworks simplyworks is offline
Junior Member
 
Join Date: Jul 2006
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
Default

The folder in the normal port 80 / 443. The folder path is /home/www/web4/web/intranet

I firewall port 81 from outside our network.

The employees just go to www.mydomain.com/intranet

thanks,
Ja
Reply With Quote
  #4  
Old 27th July 2006, 08:50
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,478
Thanks: 813
Thanked 5,255 Times in 4,121 Posts
 
Default

Have you tried to put the SSL cert i file in the directory /home/www/web4/ssl/?

if thsi:

Quote:
<directory "/xxx/xxx/xxx/intranet">
SSLRequireSSL
SSLVerifyClient require
SSLCAcertificateFile /root/ispconfig/openssl/ssl/intranet
</directory>
must be included in the vhost, you can copy it in the apache directives window of the ISPConfig website, then ISPConfig will add it to the vhost for you.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
vsftp - 550 Failed to change directory latcarf Server Operation 8 14th May 2006 02:05
Error during installation of certificate NoBullMan Installation/Configuration 4 14th December 2005 15:51
from http to https after installation? Mahir Installation/Configuration 25 7th December 2005 20:40
Default Certificate adamluz Installation/Configuration 1 27th September 2005 01:09
mysqlcheck has found corrupt tables m u r Installation/Configuration 1 18th August 2005 10:47


All times are GMT +2. The time now is 04:56.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.