SSL client configure. help

Discussion in 'Installation/Configuration' started by marcelodelta, Apr 25, 2012.

  1. marcelodelta

    marcelodelta New Member

    Good morning people,

    I'm having a little trouble adding clients with ssl settings in the basic ISPConfig3.

    Question.
    How to configure SSL on clients?
    It is necessary virtual IP?
    What is the procedure?


    Much obliged.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The steps are:

    1) Assign a dedicated IP to the website if yiu want to use classic ssl, as sni is only supported by latest browsers.
    2) Enable ssl ind the site and then create a ssl certificate on the ssl tab by entering the ssl details in the fileds and then selectin "create certificate" as action and pressing on the save button afterwards.

    These steps are described in detail in the ispconfig manual too.
     
  3. marcelodelta

    marcelodelta New Member

    1) You could tell these sites that offer services to classic and SNI?

    2) It could also inform the link to buy the ISPConfig manual is very interesting.

    Thank you.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

  5. marcelodelta

    marcelodelta New Member

    Informing you know where I can buy certificates SNI cheap?

    I just bought the manual.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    SSl certs for sni are normal ssl certs, so you dont have to get any special certificate type for that. If sni is supported or not depends on your webbrowser and apache version. Please see lists in the wikipedia article.

    You can get free ssl certs from startssl:

    http://www.startssl.com

    Thanks for supporting the ispconfig development by buying a manual!
     
  7. marcelodelta

    marcelodelta New Member

    On the start ssl how do I know about the type SNI.

    I found the options of class1 and grade2, unless the type SNI


    Thank you for your attention
     
  8. marcelodelta

    marcelodelta New Member

    Till

    The certifying

    domain_com.ca-bundle
    7domain_com.crt

    This certificate above may be used as is or SNI to generate a license specific to SNI?

    The problem is that I did not find any company to produce these certificates.

    I had a problem just now. I put in two different clients, different certificates. The server was offline.

    I had to go in the vhosts file to delete the certificates manually in order to return to work.

    Could you explain in more detail?
     
    Last edited: Apr 26, 2012
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    Yes. Any ssl certificate can be used for sni.

    Off course, as every ssl certificate that you can by works with sni, so nobody advsertises this. Please see #6 in this thread.

    This can happen when your webserver ois not sni capable, see wikipedia article, or when the ssl cert and key do not match. This happens when the ssl cert is not based on the csr created by ispconfig.
     

Share This Page