How do I update the server ssl certificate?

Discussion in 'General' started by PermaNoob, Oct 10, 2008.

  1. PermaNoob

    PermaNoob New Member

    I saw a reference in the forums to an SSL tab in IspConfig, but I can't locate it.

    The reason is I've been getting Server Certificate Expired errors in Thunderbird, and I suspect it's because the certificate expiration was January, 2008, so I probably just need to reset the date.
     
    Last edited: Oct 10, 2008
  2. till

    till Super Moderator Staff Member ISPConfig Developer

  3. PermaNoob

    PermaNoob New Member

    I ran this code from the first link: http://www.howtoforge.com/forums/showpost.php?p=358&postcount=4

    and got nothing but errors.

    Can someone who has done this successfully write noob instructions?

    I just need to change the date on the certificate.
     
  4. geoffmerritt

    geoffmerritt New Member

    Don't know if I am stating the obvious, I assume that you replaced "yourpassword" with your password

    And when I did the initial installation I also change the 365 to 3650 to last 10 years instead of 1
     
  5. PermaNoob

    PermaNoob New Member

    By noob instructions I mean instructions where nothing is assumed, which I know is difficult for many of you guys.

    Replacing "yourpassword" is not obvious because part of the script might replace it for you.

    Should it be a password created for the certificate, the ISPConfig password, or the server root password?

    I'm also unsure about the line breaks in the commands.

    Access was denied for some commands--do the files have to be chmod'd for write permission or should all the old certificate files just be deleted?

    Really, I just need step-by-step instructions by someone who has done it successfully, and I doubt that I'm the only one.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    You have to run the commands as root user. The commands are complete and they work even if you dont replace yourpassword with your own password, its just not very secure if you dont replace it.

    As a side node: If you tell us that something does not work and you do not post the error messages, nobody is able to help you.
     
  7. PermaNoob

    PermaNoob New Member

    OK, got it to work.

    The script didn't run because notepad was screwing up the line breaks. I switched to gizmo and that fixed that.

    Also I was trying to run the whole script at once instead of running it line-by-line. Once I ran it one line at a time, the date changed on the certificate.

    For other noobs, restart ISPConfig with /etc/init.d/ispconfig_server restart
     

Share This Page