Change the ISPConfig SSL

Discussion in 'Installation/Configuration' started by esezako, Jan 26, 2009.

  1. esezako

    esezako New Member

    Hi, I need change the Common Name (CN) in the SSL Certificate of ISPConfig because when i enter in the ispconfig panel or in the webmail always i have a warning that not are equal the CN and the domain.
    ┬┐How can i make this change?
    I have a ISPConfig 2.2.27 on Debian Etch, in production.
  2. till

    till Super Moderator

    You will have to buy a signed SSL certificate if you want to access ispconfig without a warning and then replace the cert in /root/ispconfig/httpd/conf/ssl.... with this certificate.
  3. esezako

    esezako New Member

    Well, only i need that not shown warning at all times.
    If I change the CN then only will I see the warning the first time that i enter in the domain. Now I see the warning every time I enter the domain.
    If I make my own ssl, what I have to replace file? And after i only need restart ispconfig?
  4. till

    till Super Moderator

    the files are in /root/ispconfig/httpd/conf/ssl....

    The files to be repalced in the different directorey have the name server*
  5. esezako

    esezako New Member

    Hi, i solucionate the problem with this:

    openssl genrsa -des3 -passout pass:yourpassword -out /root/ispconfig/httpd/conf/ssl.key/server.key2 1024
    openssl req -new -passin pass:yourpassword -passout pass:yourpassword -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.csr/server.csr -days 365
    openssl req -x509 -passin pass:yourpassword -passout pass:yourpassword -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -in /root/ispconfig/httpd/conf/ssl.csr/server.csr -out /root/ispconfig/httpd/conf/ssl.crt/server.crt -days 365
    openssl rsa -passin pass:yourpassword -in /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.key/server.key
    chmod 400 /root/ispconfig/httpd/conf/ssl.key/server.key

    and change the CN.

    Thanks for all
: ispconfig, ssl

Share This Page