SSL Certificate

Discussion in 'Installation/Configuration' started by modir, Jan 25, 2010.

  1. modir

    modir New Member

    I would like to add a new domain with SSL support. But the certificate does not get saved and neither the part of the SSL configuration.

    This is what I did:
    1) Added a new IP address under System -> Edit Server IP
    2) Created a new customer
    3) Created the new domain without SSL support, but with the new IP address selected.
    4) Edited the domain and selected SSL under "Website" and copy and pasted the SSL certificate and SSL bundle into their respective fields. And as SSL action I selected "Save certificate"

    But nowhere /etc/httpd/conf/sites-enabled/ I can find now the SSL configuration and it looks like the certificate is not saved either. It must be in the database because when I edit the domain again the certificate and the bundle is still there.

    What did I do wrong?
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The ssl configuration is in the vhost file of the website, so ther is no additional file added in /etc/httpd/conf/sites-enabled/

    Regarding the ssl creation, you have to create a cert first and not paste any other cert there as the private ssl key is missing then and apache is not able to use this cert.

    So step 4 is: enter the details for the cert, select "create" as action and click on save.
    5) a few minutes later, go to the ssl tab and take the csr that has been created and let it sign by a ssl authority.
    6) Take the ssl cert and bundle that you got back from the ssl authority and paste it into the fields in ispconfug, select "save certificate" as action and click on save.
  3. modir

    modir New Member

    Hi Till,

    Thank you for the answer.

    This brings me to another question: This is a 1:1 migration of an existing website. Do you know if it is possible to to just take the old CSR, certificate and bundle and save it on the new server?

    And I would like to file some usability enhancement requests regarding this. Do you know if there is a bugtracker or something similar?

Share This Page