SSL Certificates

Discussion in 'Installation/Configuration' started by msource, Jan 15, 2008.

  1. msource

    msource New Member

    Hi,

    I'm whant to know how the SSL for eache IP Work.

    I have the following configuration on my network:

    DMZ Zone:
    My Server (icaro.liz-online.pt)
    Private IP: 192.168.186.40
    Public IP: 62.48.192.43

    How do i configure my server/ispconfig to work whit more than one ip because of the SSL Certificates?

    I dont wont to use Multi-IP SSL.
     
  2. Hans

    Hans Moderator Moderator

    Add the additional IP-addresses in ISPConfig within the IP-list (one per line).

    Please also have a look here: http://www.howtoforge.com/faq/14_49_en.html

    And add additional ip-addresses within /etc/network/interfaces

    # 1st additional IP-address:
    auto eth0:0
    iface eth0:0 inet static
    address ip-address 2
    netmask <value>
    network <value>
    gateway <value>
    broadcast <value>

    Restart your network afterwards
     
  3. msource

    msource New Member

    Tanks for the quick anwser.

    1 - I Have the Public IP: 62.48.192.43 aplied to the Private IP: 192.168.186.40
    2 - I i configured for exemple mor 10 Private IP's (192.168.186.40 - 192.168.50), i need to associete another Public IP? What can i do?
    3 - How do the ssl certificate whork on the mather?

    Tanks for all you efford, and sorry for this lame questions.
     
  4. msource

    msource New Member

    Another thing,

    Could i just have one Ethernet Card or i have to buy varios Ethernet Cards?
     
  5. Hans

    Hans Moderator Moderator

    Even with one Networkcard you are able to use more than one IP-address.
    Define these additional (internal) IP-addresses within your /etc/network/interfaces as i show you here:

    # 1st additional IP-address:
    auto eth0:0
    iface eth0:0 inet static
    address 192.168.186.41
    netmask <value>
    network <value>
    gateway <value>
    broadcast <value>

    # 2st additional IP-address:
    auto eth0:1
    iface eth0:0 inet static
    address 192.168.186.42
    netmask <value>
    network <value>
    gateway <value>
    broadcast <value>

    and so on.


    Add these internal IP-addresses also within the IP-list within ISPConfig then you're able to use a SSL certificate for every site with an own internal IP-address.
     
    Last edited: Jan 15, 2008
  6. msource

    msource New Member

    Hi,

    Tanks for you quick and nice anwser.

    I was able to configure 4 Ip's on the same machine and the Certificates work very nice, but i have one question.

    For each Private IP that i configure to SSL domain, i have to associate a new Public IP, correct?

    Ex:
    192.168.186.50 -- 62.48.192.45
    192.168.186.51 -- 62.48.192.46
    192.168.186.52 -- 62.48.192.47

    All of this IP's are in the same machine.
     
    Last edited: Jan 16, 2008
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    Yes, thats correct.
     
  8. msource

    msource New Member

    Hi,

    Guy's your thes best.
    The SSL certificates work fine and easy whit this configuration.

    One question, the SSL Certificates consume a lot of resources from the machine?

    Very tanks for all your help.
     

Share This Page