ispCP - Board - Support
How to install certificate SSL TRUSTED - Printable Version

+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Development Area (/forum-1.html)
+--- Forum: General discussion (/forum-11.html)
+--- Thread: How to install certificate SSL TRUSTED (/thread-3133.html)

How to install certificate SSL TRUSTED - natural - 04-25-2008 06:21 AM

Hello everybody ,
I have buy a ssl certificat and i have try to install it with your instruction in the HOW TO but the install ssl don't work.
I have the .key , .crt and the chain.crt

What does i have to do to install this certificat ?
Could you explain me step by step please Smile

Thanks you very much

RE: How to install certificate SSL TRUSTED - platzwart - 04-25-2008 06:32 AM

ask the people that sold the certificate...

RE: How to install certificate SSL TRUSTED - joximu - 04-25-2008 06:50 AM

addon: ispcp does not need a special treatment in the apache config, just the normal with fastcgi etc.

So the certificate seller should help you.

RE: How to install certificate SSL TRUSTED - natural - 04-25-2008 07:31 PM

joximu Wrote:addon: ispcp does not need a special treatment in the apache config, just the normal with fastcgi etc.

So the certificate seller should help you.

My problem after install is :
Quote:[Thu Apr 24 17:59:39 2008] [error] [client 85.241.137.217] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): *
[Thu Apr 24 18:01:20 2008] [notice] caught SIGTERM, shutting down
[Thu Apr 24 18:02:44 2008] [error] Unable to configure RSA server private key
[Thu Apr 24 18:02:44 2008] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu Apr 24 18:02:56 2008] [error] Unable to configure RSA server private key
[Thu Apr 24 18:02:56 2008] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu Apr 24 18:03:08 2008] [error] Unable to configure RSA server private key
[Thu Apr 24 18:03:08 2008] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu Apr 24 18:03:36 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Thu Apr 24 18:03:37 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Thu Apr 24 18:03:37 2008] [notice] FastCGI: process manager initialized (pid 22557)
Anybody have an idea to help me ?

Best regards ,
Quentin

RE: How to install certificate SSL TRUSTED - joximu - 04-26-2008 12:27 AM

Hi Quentin

this is really not an ispCP issue. Maybe someone reads here which has some special knowledge with certificates - but maybe not.

I recommend: ask the reseller and maybe in a more Apache-SSL/TLS-Certs specialized forum. Maybe also your favorties search engine helps if you search for the error numbers/error messages

/Joximu

RE: How to install certificate SSL TRUSTED - Tseng - 04-26-2008 01:23 AM

Hi,

it means you are either using the wrong certificate or the wrong key. Compare the two using

Code:
openssl x509 -noout -text -in certfile -modulus
to check the cerificate, and

Code:
openssl rsa -noout -text -in keyfile -modulus
to check the keyfile. Now the "modulus" and the "public exponent" must match exactly. Make sure you don't have trailing spaces in your files.

Hope this helps,

Tseng

RE: How to install certificate SSL TRUSTED - natural - 04-26-2008 05:55 AM

I have some other bugs :
Quote:[Fri Apr 25 21:47:11 2008] [notice] Graceful restart requested, doing restart
[Fri Apr 25 21:47:11 2008] [error] [client 127.0.0.1] File does not exist: /htdocs
[Fri Apr 25 21:47:11 2008] [error] (9)Bad file descriptor: apr_socket_accept: (client socket)
[Fri Apr 25 21:47:11 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Fri Apr 25 21:47:11 2008] [notice] FastCGI: process manager initialized (pid 25143)
[Fri Apr 25 21:47:11 2008] [warn] FastCGI: server "/var/www/fcgi/master/php5-fcgi-starter" (uid 2000, gid 2000) started (pid 25144)
[Fri Apr 25 21:47:11 2008] [notice] Apache configured -- resuming normal operations
[Fri Apr 25 21:47:13 2008] [notice] caught SIGTERM, shutting down
[Fri Apr 25 21:47:15 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Fri Apr 25 21:47:16 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Fri Apr 25 21:47:16 2008] [notice] FastCGI: process manager initialized (pid 25279)
[Fri Apr 25 21:47:16 2008] [warn] FastCGI: server "/var/www/fcgi/master/php5-fcgi-starter" (uid 2000, gid 2000) started (pid 25280)
[Fri Apr 25 21:47:16 2008] [notice] Apache configured -- resuming normal operations
[Fri Apr 25 21:47:47 2008] [warn] FastCGI: (dynamic) server "/var/www/fcgi/prixmalins.net/php5-fcgi-starter" (uid 2002, gid 2002) started (pid 26297)
[Fri Apr 25 21:48:47 2008] [warn] FastCGI: (dynamic) server "/var/www/fcgi/hebergeons.net/php5-fcgi-starter" (uid 2001, gid 2001) started (pid 28226)

What does is mean ?
What can i do ?

Quentin

RE: How to install certificate SSL TRUSTED - natural - 04-26-2008 06:06 AM

Apache don't start when i put this lines in my config file

Quote:NameVirtualHost 87.98.181.189:443

<VirtualHost 87.98.181.189:443>

SSLEngine on
SSLCertificateFile /etc/apache2/ssl.crt/certificat.crt
SSLCertificateKeyFile /etc/apache2/ssl.crt/deprotected.key
SSLCACertificateFile /etc/apache2/ssl.crt/certificat-chain.crt

But if i write #SSLEngine on , it's start ..
What can i have to do ?