Installing ssl certificate in ispconfig from 123-reg ssl

Discussion in 'Server Operation' started by ginner159, May 29, 2013.

  1. ginner159

    ginner159 HowtoForge Supporter

    Hi all,

    I am asking for a little assistance in installing a purchased ssl certificate from 123-reg.co.uk

    I have purchased and downloaded all the files that come with buying the ssl but this is my first time in buying one. I got a properly signed cert as i currently have setup a few domains but i want to use one domain to address email and ispconfig 3 without the annoying warning message. (setting up a small hosting site for friends and family)

    ie, mydomain.com - used for mail.mydomain.com and mydomain.com:8080 (ispconfig port)
    client1domain.com, client2domain.co.uk ect use dns mx records pointed at mail.mydomain.com and cname pointed at admin.mydomain.com (for client login panel)

    I have setup my VPS (hosted at HTTPNode) using http://www.howtoforge.com/perfect-server-debian-squeeze-with-bind-and-dovecot-ispconfig-3 and have got emails and everything working.

    Here is a image of what i have got from them (domain removed for privacy, also attached)
    [​IMG]

    Id like to be able to use the ssl cert for email (like on phones to remove the not trused messgae), remove the warning on ispconfig page and to secure the registered domain.

    I know it sounds alot and im thankful for any help you can give me. im not a total *nix noob but ive still alot to learn

    Thanks,
    Matt
     

    Attached Files:

  2. ginner159

    ginner159 HowtoForge Supporter

    50 views! can anyone help me?
     
  3. monkfish

    monkfish New Member

    http://bit.ly/11aDO4q

    Did you buy a wildcard SSL certificate; ie *.mydomain.com as the world of SSL says the above two are different realms. Makes a difference as even if its SSL enabled your browser may still throw a warning as the site won't match the certificate. Worth checking.

    These notes are specific to a/my Centos build. You will have to adapt as necessary.

    - Sites > mydomain.com > web domain tab, enable SSL click save
    - under SSL tab paste key and cert or paste bundle and save.
    - wait for job to update config and look in /var/www/mydomain.com/ssl where you will see mydomain.com.crt and mydomain.com.key files
    - copy your intermediate.crt file into same folder
    - Go back to ispconfig control panel under sites > mydomain.com > options and in apache directives enter a line "SSLCertificateChainFile /var/www/mydomain.com/ssl/intermediate.crt" to match the filename you entered.
    - Save and test

    For ispconfig same principle but you may have to modify /etc/httpd/conf/sites-available/ispconfig.vhost yourself and enter SSLCertificateChainFile as a line in there manually. The ispconfig certs live in /usr/local/ispconfig/interface/ssl. Overwrite the .crt and .key files with yours and don't forget to copy the intermediate crt as well. Restart apache.

    HTH
     
    Last edited: May 31, 2013
  4. ginner159

    ginner159 HowtoForge Supporter

    lolz to that! and yer i did type that but i got confused so as not to hijack a thread started a new one.

    Looking at my ssl i got one of these http://www.123-reg.co.uk/ssl-certificates/123-ssl-certificates.shtml so i don't think i did bugger!

    If it is the case of my ssl only securing mydomain.com..... then will accessing webmail via mydomain.com/webmail/ be covered?

    if not i will do as you said and secure ispconfig as id like my clients to feel safe :)

    also i found this on 123-reg website http://www.123-reg.co.uk/support/an...-SSL/installing-your-ssl-apache-open-ssl-657/ (halfway down Apache V2)
    using what you said, correct me if im wrong, but i could put a link in the same box to the other files and upload all 5 files i downloaded to /var/www/mydomain.com/ssl/

    and thanks for your help it really is appreciated!
     
    Last edited by a moderator: Jan 10, 2015

Share This Page