ssl with certificate from startssl.com

Discussion in 'Installation/Configuration' started by weezul, Feb 9, 2010.

  1. weezul

    weezul New Member

    hello,

    ive problems getting ssl running with those free certificates from startssl.com

    what i did:

    at first i created a ssl certificate via ispconfig, then i tried to paste those certificate request and keyfile into the startssl.com form and work with those existing keys but that didnt work.. so i didnt skip the step where i had my own certificate request and keyfile and created a new key and certificate using the startssl webpage.

    so i had 4 files:
    ssl.key
    ca.pem
    sub.class1.server.ca.pem
    ssl.crt

    and i created with openssl req -new -key ssl.key -outsite.csr a new request file.

    i pasted the contents of the .csr file an the contents of the ssl.crt file into the ispconfig control pannel and copied ca.pem and sub.class1.server.ca.pem into /var/www/site/ssl
    and added this 2 files via the apache directives tab as mentioned in an other post.

    after waiting for ispconfig to update all sites dont load anymore, so i guess i'm doing something wrong..

    i tried it a few times now and i cant create a new certificate on the site so iam stuck here :/

    any help woul be appreciated
     
  2. till

    till Super Moderator

    1) create a ssl cert in ispconfig.
    2) take the certificate request that ispconfig created and let it sign from startssl.
    3) copy the crt that you get from startssl back into ispconfig and choose save as option.
     
  3. weezul

    weezul New Member

    hello,

    thats what i tried before but when using my ispconfig certificate iam getting those error message:

    Code:
        * Your key was created with a size of 1024 bit and is potentially vulnerable.
        * Make sure to create a RSA key of at least 2048 bit and then try it again.
    can i reconfigure ispconfig somehow to create 2048 bit keys?


    thanks in advance
     
  4. till

    till Super Moderator

  5. weezul

    weezul New Member

    thanks now it worked well :)
     

Share This Page