Newb: Most elegant way to generate *Self signed* ssl certificate?

Discussion in 'Installation/Configuration' started by smartin, Feb 14, 2010.

  1. smartin

    smartin New Member

    Hi,

    Petrified of breaking anything as usual...

    I'm running ISPc3 on Ubuntu 8.04 LTS.

    I need to generate a *self signed* ssl certificate for one of the sites I have running.

    What is the most elegant way to do this please?

    The only guides I can find (here for instance) say things like "Generate the cert like you normally would" or that I have to have an IP address for each site I need a cert for, which I definitely don't.

    What's the best way?

    Do I have to generate a key first somehow?

    Don't even know where to start and I'd hate to break my ISPc3 setup...

    tia :)

    S
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Did you look at the website settings? ;)

    Enable ssl checkbox in the website settings, go to the ssl tab, enter the details for the ssl cert like country, organisation etc. and select "create" as action and click on save. Thats all.
     
  3. smartin

    smartin New Member

    Till,

    Yesterday I did exactly that and nothing seemed to happen. Today I find the SSL Request box and the SSL Certificate box populated. Something obviously did happen :)

    Is that it? https working?

    If I place an html file inside the ssl directory of my site, I can't connect to it...

    S
     
    Last edited: Feb 16, 2010
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Yes, thats all. It takes some time to generate the ssl certs, you have to wait 1 - 2 minutes until the cert is visible in the ssl cert field.
     
  5. smartin

    smartin New Member

    Till,

    Thanks for that.

    Why can't I connect to an html document inside the ssl directory of my site?

    I'm using https://www.mysite.co.uk/index.html
    and
    https://www.mysite.co.uk/ssl/index.html

    My browser just times out... Nothing in the logs.

    S
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    1) did you create the ssl direcrtory? As ispconfig does not use such a directory.
    2) can you access the same file by http?
    3) which errors are in the error log of the site and the global error or ssl logs?
    4) Is your server listening on port 443?
    5) did you open port 443 in the firewall or router, if you use one.
     
  7. smartin

    smartin New Member

    Till,

    1) Sorry, I misunderstood the ssl folder which ISPc3 creates... It's not a web folder at all is it? :eek:
    Just for storing certs and keys?
    4) Yes.
    5) That was the problem:)

    So... any page within my site can now be served over http or https. Yes? :)

    I'll get the hang of all this stuff eventually won't I...? :p

    S
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    Thats the folder for the certificates, it is not a accessible web folder.

    yes.
     

Share This Page