ISPConfig has 'extra' attributes not covered in the manual

Discussion in 'Installation/Configuration' started by Nap, Jul 10, 2012.

  1. Nap

    Nap Member


    I'm presently installing ISPConfig3.0.4.6 on my server.
    During the install, a number of questions are asked. One that is't covered in the manual is:

    Please enter the following 'extra' attributes to be sent with your certificate request
    A challenge password []:

    I presume this is similar to the 'passphrase' that is used in SSH RSA keys?
    Where is it used? Who needs to know it? Is it safe to leave blank?


    (Thought I better post in the right forum to get an answer quicker. Please delete the thread, if possible, in the Linux forum)
  2. dclardy

    dclardy Member

    This is part of the SSH key generation for the control panel. You can leave it blank.
  3. Nap

    Nap Member

    thnx dclardy,

    I've done that in the past, but only for a key that I use personally.

    Presumably, by using a passphrase, the cryptographic strength of the key is significantly increased, and as individuals, we all have our own perspective on how secure something is or should be.
    So, in the context of installing ISPConfig3.0.4.6, if I don't leave it blank, who needs to know the passphrase? Is this certificate being generated for resellers and clients, or just me as the administrator?

    I can't wait any longer, so I'm proceeding with my install on the basis that I can save the database contents and reinstall if I've made a blunder here.

    True to the heading 'extra' attributes; the password is not the only new field I need to fill.

    Now I need to supply 'An optional company name'. I'm going to use the name of my business.
    Last edited: Jul 11, 2012
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    New versions of the manual are published for every major ISPConfig release (3.0.3, 3.0.4, 3.0.5) and not for minor releases. If a function has been added in a minor release, it will be covered in the manual of the next major release.

    You can see the release date and version umber for which a manual is on the manual page:
  5. cfoe

    cfoe ISPConfig Developer ISPConfig Developer

    Both fields are totally normal for the generation of SSL certificate request.

    If you want to generate a request to buy a cert from a CA then you should look at their FAQs. Some need you to leave both fields blank.

    As a rule of thumb I would say leave them blank all the time.
    The complete cert will not display them and they can only be in the way if you want to buy a cert.

Share This Page