ISPConfig: from http to https & from https to http

Discussion in 'Tips/Tricks/Mods' started by Hans, Apr 15, 2006.

  1. Hans

    Hans Moderator ISPConfig Developer

    After installing ISPConfig, sometimes we want to change from http to https mode, or as you wish from https to http mode.

    With this small instruction you can read how you can do this!
    Realise that you have to be careful, do not screw your system!

    Here we go:

    From http to https:


    1) Copy file httpd.conf_https from the Tarball to filefolder /root/ispconfig/httpd/conf

    2) Make a copy of the existing httpd.conf file !

    3) Rename httpd.conf_https to httpd.conf

    4) Open the new httpd.conf and replace {SERVER_NAME} with the server name
    (have a look at the backed-up httpd.conf to find out the correct value)

    5) Open /home/admispconfig/ispconfig/lib/config.inc.php and change the ISPConfig URL from http to https.

    6) Finally restart ISPConfig: /etc/init.d/ispconfig_server restart


    From https to http:

    1) Copy file httpd.conf_http van de Tarball to filefolder /root/ispconfig/httpd/conf

    2) Make a copy of the existing httpd.conf file !

    3) Rename httpd.conf_http to httpd.conf

    4) Open the new and replace {SERVER_NAME} with the server name
    (have a look at the backed-up httpd.conf to find out the correct value)

    5) Open /home/admispconfig/ispconfig/lib/config.inc.php and change the ISPConfig URL from https to http.

    6) Finally restart ISPConfig: /etc/init.d/ispconfig_server restart


    Hans
     
  2. AcidKat

    AcidKat New Member

    When you sat "copy file from the tarball", where is the tarball located?
     
  3. lubos

    lubos New Member

    Hi AcidKat,
    you have to download so called Tarbal from http://www.ispconfig.org/downloads.htm.
    Tarbal is actualy compressed file containing whole software. You can uncompres it (depending on your operational system) in different ways.
    Windows:
    If you'll download it onto Windows I will suggest to use 7zip, free compressing software available on http://www.7-zip.org/. Make sure that you will uncompress tarbal twice (first ISPConfig-2.2.21.tar.gz file and afterwards uncompress newly created ISPConfig-2.2.21.tar file) as it is compressed twice.
    Linux:
    Alternatively you can download newest tarbal to Linux by using following command:
    Code:
    wget http://prdownloads.sourceforge.net/ispconfig/ISPConfig-2.2.21.tar.gz?download
    Make sure that you'll download right version of ISPconfig as it must be the same as you have installed on your server. If you did not upgraded to newest version go to ispconfig.org/download and find file matching your installation.
    Afterwards you can unpack it by using command:
    Code:
    tar xvfz ISPConfig-2.2.21.tar.gz
    .Next continue with steps described above. When you finnish you can safely remove both, tarbal and unpacked files from your computer using commands
    Code:
    rm ISPConfig-2.2.21.tar.gz
    rm -r install_ispconfig
    Make sure that you will NOT download tarball to location where is your current installation as you can break it. All above written commands have to be issued from the same directory. You can use e.g.
    Code:
    cd /opt/
    to go to opt directory and execute all commands from here.
    I hope this help you.
    Lubos
     
  4. TomC

    TomC New Member

    Hi Hans,

    thanks for the great HowTo - it worked perfectly for me a few weeks ago when I changed the configuration of my ISPConfig from https to http.

    However, today I came across a little drawback: I upgraded my ISPConfig to the latest version 2.2.22. After the upgrade, the configuration was running with https again. So I had to go through the same procedure once again.

    So, somewhere ISPConfig seems to remember whether it was configured to run via http or https. Do you have any idea where this could be and how I can change it so that the next upgrade runs more smoothly?!

    Thanks loads,
    Tom
     
  5. Hans

    Hans Moderator ISPConfig Developer

    @TomC,
    I don't know how this can be done.
    Probably Till knows the answer..
     
  6. falko

    falko Super Moderator ISPConfig Developer

    Please make sure that $go_info["server"]["server_url"] in /home/admispconfig/ispconfig/lib/config.inc.php has the right value (http).
     
  7. _X_

    _X_ New Member

    If someone gets error about certificates for main ISPConfig here is how to recreate them:
    http://www.howtoforge.com/faq/14_63_en.html

    To make SSL work for client sites in ISPConfig:
    under ISPManager/Sites/site.com/Basis>SSL - enable
    after that there is NEW SLL tab
    Enter all data exept SSL Request: and SSL Certificate:
    for Action: Create certificate
    Save
    after that client can use https for login into ISPConfig and phpmyadmin and webmail (if you created Co-Domain for webmail site change forward from http to https)
    certificat is self-signed and you get warning but untill you get proper certification this will work.
     
  8. vk1003

    vk1003 New Member

    hi

    hi sory to disturb you all...

    my server runs on ispconfig 3 with centos 5.5.. the sites are working perfectly fine but the only issue is that the ispconfig admin login section is opening only on port 8080 and in many plces people are not able to see the control panel login.

    Is the above said step the one to change the port :8080 to https://domainname.com:443 one ! ?pls advice..

    To be more perfect

    mytranslator.in is now running on this server and http://mytranslator.in:8080 is not opening in major areas and hence i want this to be https://mytranslator.in:443 where my ispconfig admin login opens up for my reseller and my client login.

    pls help

    venkat
     
  9. falko

    falko Super Moderator ISPConfig Developer

    This is the ISPConfig 2 forum. Please open a new thread in the ISPConfig 3 forum.
     
  10. hahni

    hahni New Member

    What must be done, to use ISPConfig2 with Certs from StartSSL (http://www.startssl.com)? The CSR must be 2048 Bit and not 1024 Bit like in ISPConfig2-standard.
     
  11. hahni

    hahni New Member

    Hello together,

    I have created a cert from "http://www.startssl.com". They told me, that I also need this Configuration:

    Code:
    SSLCertificateChainFile /usr/local/apache/conf/sub.class1.server.ca.pem
    SSLCACertificateFile /usr/local/apache/conf/ca.pem
    But there are no .pem-Files in the ISPConfig-Folders. What must be done?

    Thanks!

    Hahni
     
  12. till

    till Super Moderator Staff Member ISPConfig Developer

    The apache configuration for ispconfig is under /root/ispconfig/httpd/conf/httpd.conf and you have to add all directives for the ssl certificates and to load chain files there. You will find there alos the ssl folders where you acn add your pem files.
     
  13. hahni

    hahni New Member

    I did not see any changes. But the support told me, everythings works fine. Maybe a problem with my browsers. But there is no option to clear certs in FF4 to get the originial installation state.
     
  14. Rockdrala

    Rockdrala New Member

    THIS DOES NOT APPLY TO NGINX --caps off
     

Share This Page