[HowTo] Create your own SSL CA and secure multiple services

[thibotus01]

http://www.isp-control.net/documentation..._made_easy

I followed this one, it seems good.

[MasterTH]

thats the howto i was talking about.

[viperiii]

(08-02-2009 05:16 AM)thibotus01 Wrote:  http://www.isp-control.net/documentation..._made_easy

I followed this one, it seems good.

Hummm... was able to get this one working...
http://www.isp-control.net/documentation...e_services

Problem with either one is I want to enable a particular domain for ssl..

when I enabled that particular domain and edited it up... I got a 500 error from apache. Sure it would have worked for the root ispcp domain but I need it for testing on some of my dev domains.

can that be done? either one of these tutorials cover that?
.............
think I found it here...

http://isp-control.net/forum/thread-4696.html

Just the simple part of needing to add all the other directives for that vdomain... all the suexecs and php data and I bet it will work... makes sense at least!

will test and hopefully report... just will probably mess up any future upgrades...grrr...

[aseques]

(08-08-2009 03:17 AM)viperiii Wrote:  

(08-02-2009 05:16 AM)thibotus01 Wrote:  http://www.isp-control.net/documentation..._made_easy

I followed this one, it seems good.

Hummm... was able to get this one working...
http://www.isp-control.net/documentation...e_services

Problem with either one is I want to enable a particular domain for ssl..

when I enabled that particular domain and edited it up... I got a 500 error from apache. Sure it would have worked for the root ispcp domain but I need it for testing on some of my dev domains.

can that be done? either one of these tutorials cover that?
.............
think I found it here...

http://isp-control.net/forum/thread-4696.html

Just the simple part of needing to add all the other directives for that vdomain... all the suexecs and php data and I bet it will work... makes sense at least!

will test and hopefully report... just will probably mess up any future upgrades...grrr...

Hey, since it seems that most people are using this thread instead of the other one (for the "made easy ssl stuff" here)

I also made another modification, so you can have both ssl and nossl at the same time, for all those customers that want a free ssl enabled area, it seems that is more or less what thibotus01 was asking for.
Details here, http://isp-control.net/forum/thread-7262.html

NOTE: I am using http://www.isp-control.net/documentation..._made_easy quite often and haven't had much problems, if anyone tried with/without success or has something to add, please report here or at here, also the mod to have both ssl and nonssl is working fine in a production system.

Cheers

[Diego]

http://www.isp-control.net/documentation..._made_easy
This topic does not exist yet

http://www.isp-control.net/documentation...e_services
This topic does not exist yet

[TheCry]

http://www.isp-control.net/documentation..._made_easy

http://www.isp-control.net/documentation...e_services

[rethus]

(05-20-2008 03:28 AM)fulltilt Wrote:  error by certificate generation

if i use:

Code:

openssl genrsa -out apache.key.pem -rand private/.rand 2048
openssl req -new -key apache.key.pem -out apache.req.pem
openssl ca -name RootCA -in apache.req.pem -out apache.cert.pem

i get this error in last step openssl ca:

Code:

Using configuration from /usr/lib/ssl/openssl.cnf
variable lookup failed for RootCA::private_key
21745:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=RootCA name=private_key

Had the same Problem here. Found the Solution:

You have to enter the exactly String for Parm -name which u have defined in /usr/lib/ssl/openssl.cnf in the Section [ca].

For me, my CA named xstableCA, but into openssl.cnf i had create the section as [xstable_CA].
So if i enter

Code:

openssl ca -name xstable_CA -in apache.req.pem -out apache.cert.pem

it works for me.