ISPconfig SSL certificated Saved 'no more acces to ISPConfig"

Discussion in 'Installation/Configuration' started by Folamour, Nov 11, 2010.

  1. Folamour

    Folamour New Member

    HI Sorry to disturb you, but I an effort to make my SSL certificate working I have createad on and 'SAVED' it in the ISPconfig 3 panel.

    since this time i've no more access to www domain and to ISP config 3 panel i thinkg its because IP of www domain and ISP is the same.

    I've an empty SSL folder on the server and one in the root of my Ftp that's not the same, i'll tried to delete all certificate within the directory of the ftp but no luck still not have acces to www or ISPconfig 3 to delete key

    i'm stuck!!!!

    hope you can help.

    Guillaume,
     
  2. ivomendonca

    ivomendonca Banned

    If i understand what is your problem.
    Delete from the vhost the "ssl" part, there is more than one guy with your problem is this forum.
     
  3. Folamour

    Folamour New Member

    hi ivomendonca, yes i think i'm in a deep s... sorry for my leak of knowledge but i've tried to put off the ssl with the command i've read in a ssl topic

    a2dismod ssl

    that changed nothing and I dont know how to turn it on again for my provider engineer

    its well a2enmod ssl? (just found it)

    please can you tell me if what you told the 'vhost'? does is the ftp of the domain if such, i've already tried to delete key in SSL directory, that don't change anything,

    perhaps by vhost you mean the root? if so which directory and files? the SSL directory on the server

    vps4011:/ssl#

    is empty the only one with file is on the root of the ftp

    ftp:[email protected]/ssl

    its full of one crt., csr, and a key.

    tried to delete it no luck.

    Thanks a lot to be more specific, i'm a noob in linux as the ftp is still active i'm re-backuping my files if I need to deploy a new server

    database was also saved before modification,


    Guillaume,
     
    Last edited: Nov 11, 2010
  4. ivomendonca

    ivomendonca Banned

    Please dont execute commands like that.
    Just change the vhost file in /etc/apache2/sites-available/site_name.vhost
    and delete the SSL part is easy to see.
     
  5. Folamour

    Folamour New Member

    Opps sorry I'll think I broken the box, so, i've deleted all of that bellow for SSL in the file, that change nothing...


    <IfModule mod_ssl.c>
    ###########################################################
    # SSL Vhost
    ###########################################################

    <VirtualHost *:443>
    DocumentRoot /var/www/clients/client2/xxxxx.fr/web

    ServerName xxxxx.fr
    ServerAlias www..fr
    ServerAdmin [email protected]

    ErrorLog /var/log/ispconfig/httpd/xxxxx.fr/error.log

    ErrorDocument 400 /error/400.html
    ErrorDocument 401 /error/401.html
    ErrorDocument 403 /error/403.html
    ErrorDocument 404 /error/404.html
    ErrorDocument 405 /error/405.html
    ErrorDocument 500 /error/500.html
    ErrorDocument 503 /error/503.html

    SSLEngine on
    SSLCertificateFile /var/www/clients/client2/web67/ssl/xxxxx.fr.crt
    SSLCertificateKeyFile /var/www/clients/client2/web67/ssl/xxxxx.fr.key


    ErrorLog /var/log/ispconfig/httpd/xxxxx.fr/error.log

    I've tried to rename to

    SSLCertificateFile /var/www/clients/client2/web67/ssl/
    SSLCertificateKeyFile /var/www/clients/client2/web67/ssl/

    to remove the key but that don't change anything.

    I have verified syslog at var/log nothing ssl related error

    but in ErrorLog /var/log/ispconfig/httpd/xxxxx.fr/error.log
    i have that at the bottom its perhaps when I have tried to generate a key.

    [Thu Nov 11 09:33:05 2010] [warn] RSA server certificate CommonName (CN) `www.xxxxx.fr' does NOT match server name!?
    [Thu Nov 11 09:33:05 2010] [error] Unable to configure RSA server private key
    [Thu Nov 11 09:33:05 2010] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch


    NB. i'm not english i do my best to understood

    Thanks,
     
    Last edited: Nov 11, 2010
  6. ivomendonca

    ivomendonca Banned

    Delete this part and the files too.

    SSLEngine on
    SSLCertificateFile /var/www/clients/client2/web67/ssl/xxxxx.fr.crt
    SSLCertificateKeyFile /var/www/clients/client2/web67/ssl/xxxxx.fr.key

    disable SSL on sites first :)

    upgrade to last version, and try again.

     
    Last edited: Nov 12, 2010

Share This Page