(08-02-2009 05:16 AM)thibotus01 Wrote:  http://www.isp-control.net/documentation/howto/security/ssl_made_easy

I followed this one, it seems good.

(08-08-2009 03:17 AM)viperiii Wrote:  

(08-02-2009 05:16 AM)thibotus01 Wrote:  http://www.isp-control.net/documentation/howto/security/ssl_made_easy

I followed this one, it seems good.

Hummm... was able to get this one working...
http://www.isp-control.net/documentation/howto/security/create_your_own_ssl_ca_and_secure_multiple_services

Problem with either one is I want to enable a particular domain for ssl..

when I enabled that particular domain and edited it up... I got a 500 error from apache. Sure it would have worked for the root ispcp domain but I need it for testing on some of my dev domains.

can that be done? either one of these tutorials cover that?
.............
think I found it here...

http://isp-control.net/forum/thread-4696.html

Just the simple part of needing to add all the other directives for that vdomain... all the suexecs and php data and I bet it will work... makes sense at least!

will test and hopefully report... just will probably mess up any future upgrades...grrr...

(05-20-2008 03:28 AM)fulltilt Wrote:  error by certificate generation

if i use:

Code:

openssl genrsa -out apache.key.pem -rand private/.rand 2048
openssl req -new -key apache.key.pem -out apache.req.pem
openssl ca -name RootCA -in apache.req.pem -out apache.cert.pem

i get this error in last step openssl ca:

Code:

Using configuration from /usr/lib/ssl/openssl.cnf
variable lookup failed for RootCA::private_key
21745:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=RootCA name=private_key