SSL Certificate for a subdomain?

Discussion in 'Installation/Configuration' started by Steve85, May 25, 2013.

  1. Steve85

    Steve85 New Member

    Hello all,

    how is it possible to create a SSL certificate for a subdomain?

    "mydomain.com" is no problem but if i want to encrypt my mail traffic i need a certificate for "mail.mydomain.com".

    Where can i setup this?

    Best,
    Steve
     
  2. yucktoufoo

    yucktoufoo New Member

    I assume you mean a self signed certificate? If so, by running this command, when prompted for Common Name set it to mail.yourdomain.com


    Code:
    openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365
    
    That will sign a cert for 365 days, if you dont want a passphrase on the key (which you probably dont if the cert is for a mailserver), add the -nodes option.

    Don't forget to make sure the permissions are correct on your key file.
     
  3. Steve85

    Steve85 New Member

    Thanks for answer but this wasn`t the problem ;-)

    If i create in the ISPConfig a subdomain like "login.mydomain.com" and i want to access login.mydomain.com over https i don`t find a way to create this? Maybe if i buy a wildcard certificate for "*.mydomain.com" but this shouldn`t the solution.

    I want to create a certificate for only my subdomain which i create over ISPConfig.

    Any idea? Not possible? Feature request?
     
  4. yucktoufoo

    yucktoufoo New Member

    I thought you were talking about mail server certificates!?

    I am assuming that you have just added a subdomain rather than using a subdomain to create a new "site". In which case I think wildcard certificate is probably your only way, (im guessing this... http://wiki.apache.org/httpd/NameBasedSSLVHosts is not what you need either but here for reference anyway).

    Maybe I am missing something with your setup though?
     
  5. peggyp

    peggyp New Member

    Hi,

    For securing sub-domains, you will need to buy wildcard SSL that offers facility to secure unlimited sub-domain and host domain with single SSL.
     
  6. pititis

    pititis Member

    No problem if you add the subdomain as separate website:

    - In ispconfig create your subdomain like a normal domain. Client->Domain->New (subdomain.domain.com)

    - Create website and select your previous created subdomain.domain.com. Select SSL checkbox too.

    - Create the new certificate in the SSL tab.

    - Don't forget to add a A record in the dns zone for the subdomain

    Cheers.
     
  7. Steve85

    Steve85 New Member

    Think this will work. I`m not sure if this is the right way but a for a workaround it should do.

    Thank you!
     
  8. till

    till Super Moderator

    Thats not a workaround, its described in the manual to create awebsite for a subomain if this subdomain shall have its own directory or needs any other features that exist only for vhosts in apache.
     

Share This Page