Current time: 07-02-2024, 03:31 PM Hello There, Guest! (LoginRegister)


Post Reply 
[Solved]SSL Certificate for Vitual Hosts
Author Message
Macsloverd Offline
Junior Member
*

Posts: 17
Joined: Sep 2009
Reputation: 0
Post: #3
RE: [Problem]SSL Certificate for Vitual Hosts
Sure, here are the configuration files:
Code:
server Control Panel domain is: admin.abc.com with SSL;
server domain is: abc.com;
virtual host domain is:123.com;
SSL required virtual host domain is: store.123.com.

Code:
# 00_master.conf - /etc/apache2/sites-available/

<VirtualHost 1.2.3.4:443>

    ServerAdmin     info@abc.com
    DocumentRoot    /var/www/ispcp/gui

    ServerName      admin.abc.com

    Alias /errors   /var/www/ispcp/gui/errordocs/

    ErrorDocument 401 /errors/401.html
    ErrorDocument 403 /errors/403.html
    ErrorDocument 404 /errors/404.html
    ErrorDocument 500 /errors/500.html
    ErrorDocument 503 /errors/503.html

    Alias /pma      /var/www/ispcp/gui/tools/pma/
    Alias /webmail  /var/www/ispcp/gui/tools/webmail/
    Alias /ftp      /var/www/ispcp/gui/tools/filemanager/
    
    SSLEngine On
    SSLCertificateFile /etc/ssl/certs/admin.abc.com.crt
    SSLCertificateKeyFile /etc/ssl/certs/admin.abc.com.key
    ServerAlias admin.abc.com
  
    <IfModule suexec_module>
           SuexecUserGroup vu2000 vu2000
    </IfModule>

    <Directory /var/www/ispcp/gui>
        Options -Indexes Includes FollowSymLinks MultiViews
        AllowOverride None
        Order allow,deny
        Allow from all
    </Directory>

    <IfModule mod_fcgid.c>
        <Directory /var/www/ispcp/gui>
            FCGIWrapper /var/www/fcgi/master/php5-fcgi-starter .php
            Options +ExecCGI
        </Directory>
        <Directory "/var/www/fcgi/master">
            AllowOverride None
            Options +ExecCGI MultiViews -Indexes
            Order allow,deny
            Allow from all
        </Directory>
    </IfModule>
    <IfModule mod_fastcgi.c>
        ScriptAlias /php5/ /var/www/fcgi/master/
        <Directory "/var/www/fcgi/master">
            AllowOverride None
            Options +ExecCGI MultiViews -Indexes
            Order allow,deny
            Allow from all
        </Directory>
    </IfModule>

    <IfModule mod_php5.c>
        <Directory /var/www/ispcp/gui>
            php_admin_value open_basedir "/var/www/ispcp/gui/:/etc/ispcp/:/var/run/ispcp.lock:/proc/:/bin/df:/bin/mount:/var/log/rkhunter.log:/var/log/chkrootkit.log:/usr/share/php/"
            php_admin_value session.save_path "/var/www/ispcp/gui/phptmp/"
            php_admin_value upload_tmp_dir "/var/www/ispcp/gui/phptmp/"
        </Directory>
    </IfModule>

</VirtualHost>

Code:
# ispcp.conf - /etc/apache2/sites-available/
# httpd Data BEGIN.

#
# wget-hack prevention
#

<IfModule mod_rewrite.c>
    RewriteEngine on
    RewriteCond %{HTTP_USER_AGENT} ^LWP::Simple
    RewriteRule ^/.* http://%{REMOTE_ADDR}/ [L,E=nolog:1]
</IfModule>

#
# Log processing.
#

LogFormat "%B" traff
LogFormat "%v %b %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" ispcplog

CustomLog "| /var/www/ispcp/engine/ispcp-apache-logger" ispcplog
ErrorLog "| /var/www/ispcp/engine/ispcp-apache-logger -e"

#
# mod_cband configuration
#

<IfModule mod_cband.c>
    CBandScoreFlushPeriod 10
    CBandRandomPulse On
</IfModule>

#
# let the customer decide what charset he likes to use
#

AddDefaultCharset Off

#
# Header End
#

# httpd [1.2.3.4] virtual host entry BEGIN.

NameVirtualHost 1.2.3.4:80

# httpd [{DMN_GRP}] dmn group entry BEGIN.
# httpd [{DMN_GRP}] dmn group entry END.
# httpd [abc.com] dmn group entry BEGIN.

<IfModule mod_cband.c>
    <CBandUser abc.com>
        # CBandUserLimit 0Mi
        # CBandUserScoreboard /var/www/scoreboards/abc.com
        # CBandUserPeriod 4W
        # CBandUserPeriodSlice 1W
        # CBandUserExceededURL http://admin.abc.com/errors/bw_exceeded.html
    </CBandUser>
</IfModule>

# httpd [{SUB_NAME}] sub entry BEGIN.
# httpd [{SUB_NAME}] sub entry END.

# httpd [abc.com] dmn entry BEGIN.
<VirtualHost 1.2.3.4:80>

    <IfModule suexec_module>
           SuexecUserGroup vu2015 vu2015
    </IfModule>

    ServerAdmin     webmaster@abc.com
    DocumentRoot    /var/www/virtual/abc.com/htdocs

    ServerName      abc.com
    ServerAlias     www.abc.com abc.com *.abc.com vu2015.admin.abc.com

    Alias /errors   /var/www/virtual/abc.com/errors/

    RedirectMatch permanent ^/ftp[\/]?$        http://admin.abc.com/ftp/
    RedirectMatch permanent ^/pma[\/]?$        http://admin.abc.com/pma/
    RedirectMatch permanent ^/webmail[\/]?$    http://admin.abc.com/webmail/
    RedirectMatch permanent ^/ispcp[\/]?$    http://admin.abc.com/

    ErrorDocument 401 /errors/401.html
    ErrorDocument 403 /errors/403.html
    ErrorDocument 404 /errors/404.html
    ErrorDocument 500 /errors/500.html
    ErrorDocument 503 /errors/503.html

    <IfModule mod_cband.c>
        CBandUser abc.com
    </IfModule>

    # httpd awstats support BEGIN.

   ProxyRequests Off

   <Proxy *>
      Order deny,allow
      Allow from all
   </Proxy>

   ProxyPass            /stats    http://localhost/stats/abc.com
   ProxyPassReverse        /stats    http://localhost/stats/abc.com

    <Location /stats>
        <IfModule mod_rewrite.c>
            RewriteEngine on
            RewriteRule ^(.+)\?config=([^\?\&]+)(.*) $1\?config=abc.com&$3 [NC,L]
        </IfModule>
        AuthType Basic
        AuthName "Statistics for domain abc.com"
        AuthUserFile /var/www/virtual/abc.com/.htpasswd
        AuthGroupFile /var/www/virtual/abc.com/.htgroup
        Require group statistics
    </Location>

   # httpd awstats support END.

    # httpd dmn entry cgi support BEGIN.
    ScriptAlias /cgi-bin/ /var/www/virtual/abc.com/cgi-bin/
    <Directory /var/www/virtual/abc.com/cgi-bin>
        AllowOverride AuthConfig
        #Options ExecCGI
        Order allow,deny
        Allow from all
    </Directory>
    # httpd dmn entry cgi support END.

    <Directory /var/www/virtual/abc.com/htdocs>
        # httpd dmn entry PHP support BEGIN.
        # httpd dmn entry PHP support END.
        Options -Indexes Includes FollowSymLinks MultiViews
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>

    # httpd dmn entry PHP2 support BEGIN.
    <IfModule mod_php5.c>
        php_admin_value open_basedir "/var/www/virtual/abc.com/:/var/www/virtual/abc.com/phptmp/:/usr/share/php/"
        php_admin_value upload_tmp_dir "/var/www/virtual/abc.com/phptmp/"
        php_admin_value session.save_path "/var/www/virtual/abc.com/phptmp/"
        php_admin_value sendmail_path '/usr/sbin/sendmail -f vu2015 -t -i'
    </IfModule>
    <IfModule mod_fastcgi.c>
        ScriptAlias /php5/ /var/www/fcgi/abc.com/
        <Directory "/var/www/fcgi/abc.com">
            AllowOverride None
            Options +ExecCGI -MultiViews -Indexes
            Order allow,deny
            Allow from all
        </Directory>
    </IfModule>
    <IfModule mod_fcgid.c>
        Include /etc/apache2/mods-available/fcgid_ispcp.conf
        <Directory /var/www/virtual/abc.com/htdocs>
            FCGIWrapper /var/www/fcgi/abc.com/php5-fcgi-starter .php
            Options +ExecCGI
        </Directory>
        <Directory "/var/www/fcgi/abc.com">
            AllowOverride None
            Options +ExecCGI MultiViews -Indexes
            Order allow,deny
            Allow from all
        </Directory>
    </IfModule>
    # httpd dmn entry PHP2 support END.

    Include /etc/apache2/ispcp/abc.com.conf

</VirtualHost>
# httpd [abc.com] dmn entry END.

# httpd [abc.com] dmn group entry END.

# httpd [123.com] dmn group entry BEGIN.

<IfModule mod_cband.c>
    <CBandUser 123.com>
        # CBandUserLimit 0Mi
        # CBandUserScoreboard /var/www/scoreboards/123.com
        # CBandUserPeriod 4W
        # CBandUserPeriodSlice 1W
        # CBandUserExceededURL http://admin.abc.com/errors/bw_exceeded.html
    </CBandUser>
</IfModule>

# httpd [store.123.com] sub entry BEGIN.
NameVirtualHost 1.2.3.4:443
<VirtualHost 1.2.3.4:443>

    #
    #User vu2009
    #Group vu2009
    #
    
    # SSL Ennable
    SSLEngine On
    SSLCertificateFile /etc/ssl/certs/store.123.com.crt
    SSLCertificateKeyFile /etc/ssl/certs/store.123.com.key
    
    <IfModule suexec_module>
           SuexecUserGroup vu2009 vu2009
    </IfModule>

    ServerAdmin     admin@123.com
    DocumentRoot    /var/www/virtual/123.com/store/htdocs

    ServerName      store.123.com
    ServerAlias     www.store.123.com store.123.com *.store.123.com

    Alias /errors /var/www/virtual/123.com/errors/

    RedirectMatch permanent ^/ftp[\/]?$        https://admin.abc.com/ftp/
    RedirectMatch permanent ^/pma[\/]?$        https://admin.abc.com/pma/
    RedirectMatch permanent ^/webmail[\/]?$    https://admin.abc.com/webmail/
    RedirectMatch permanent ^/ispcp[\/]?$    https://admin.abc.com/

    ErrorDocument 401 /errors/401.html
    ErrorDocument 403 /errors/403.html
    ErrorDocument 404 /errors/404.html
    ErrorDocument 500 /errors/500.html
    ErrorDocument 503 /errors/503.html

    <IfModule mod_cband.c>
        CBandUser 123.com
    </IfModule>

    # httpd sub entry cgi support BEGIN.
    ScriptAlias /cgi-bin/ /var/www/virtual/123.com/store/cgi-bin/
    <Directory /var/www/virtual/123.com/store/cgi-bin>
        AllowOverride AuthConfig
        #Options ExecCGI
        Order allow,deny
        Allow from all
    </Directory>
    # httpd sub entry cgi support END.

    <Directory /var/www/virtual/123.com/store/htdocs>
        # httpd sub entry PHP support BEGIN.
        # httpd sub entry PHP support END.
        Options -Indexes Includes FollowSymLinks MultiViews
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>

    # httpd sub entry PHP2 support BEGIN.
    <IfModule mod_php5.c>
        php_admin_value open_basedir "/var/www/virtual/123.com/:/var/www/virtual/123.com/phptmp/:/usr/share/php/"
        php_admin_value upload_tmp_dir "/var/www/virtual/123.com/phptmp/"
        php_admin_value session.save_path "/var/www/virtual/123.com/phptmp/"
        php_admin_value sendmail_path '/usr/sbin/sendmail -f vu2009 -t -i'
    </IfModule>
    <IfModule mod_fastcgi.c>
        ScriptAlias /php5/ /var/www/fcgi/123.com/
        <Directory "/var/www/fcgi/123.com">
            AllowOverride None
            Options +ExecCGI -MultiViews -Indexes
            Order allow,deny
            Allow from all
        </Directory>
    </IfModule>
    <IfModule mod_fcgid.c>
        Include /etc/apache2/mods-available/fcgid_ispcp.conf
        <Directory /var/www/virtual/123.com/store/htdocs>
            FCGIWrapper /var/www/fcgi/123.com/php5-fcgi-starter .php
            Options +ExecCGI
        </Directory>
        <Directory "/var/www/fcgi/123.com">
            AllowOverride None
            Options +ExecCGI MultiViews -Indexes
            Order allow,deny
            Allow from all
        </Directory>
    </IfModule>
    # httpd sub entry PHP2 support END.

    Include /etc/apache2/ispcp/store.123.com.conf

</VirtualHost>
# httpd [store.123.com] sub entry END.

# httpd [{SUB_NAME}] sub entry BEGIN.
# httpd [{SUB_NAME}] sub entry END.

# httpd [123.com] dmn entry BEGIN.
<VirtualHost 1.2.3.4:80>

    <IfModule suexec_module>
           SuexecUserGroup vu2009 vu2009
    </IfModule>

    ServerAdmin     webmaster@123.com
    DocumentRoot    /var/www/virtual/123.com/htdocs

    ServerName      123.com
    ServerAlias     www.123.com 123.com *.123.com vu2009.admin.abc.com

    Alias /errors   /var/www/virtual/123.com/errors/

    RedirectMatch permanent ^/ftp[\/]?$        http://admin.abc.com/ftp/
    RedirectMatch permanent ^/pma[\/]?$        http://admin.abc.com/pma/
    RedirectMatch permanent ^/webmail[\/]?$    http://admin.abc.com/webmail/
    RedirectMatch permanent ^/ispcp[\/]?$    http://admin.abc.com/

    ErrorDocument 401 /errors/401.html
    ErrorDocument 403 /errors/403.html
    ErrorDocument 404 /errors/404.html
    ErrorDocument 500 /errors/500.html
    ErrorDocument 503 /errors/503.html

    <IfModule mod_cband.c>
        CBandUser 123.com
    </IfModule>

    # httpd awstats support BEGIN.

   ProxyRequests Off

   <Proxy *>
      Order deny,allow
      Allow from all
   </Proxy>

   ProxyPass            /stats    http://localhost/stats/123.com
   ProxyPassReverse        /stats    http://localhost/stats/123.com

    <Location /stats>
        <IfModule mod_rewrite.c>
            RewriteEngine on
            RewriteRule ^(.+)\?config=([^\?\&]+)(.*) $1\?config=123.com&$3 [NC,L]
        </IfModule>
        AuthType Basic
        AuthName "Statistics for domain 123.com"
        AuthUserFile /var/www/virtual/123.com/.htpasswd
        AuthGroupFile /var/www/virtual/123.com/.htgroup
        Require group statistics
    </Location>

   # httpd awstats support END.

    # httpd dmn entry cgi support BEGIN.
    ScriptAlias /cgi-bin/ /var/www/virtual/123.com/cgi-bin/
    <Directory /var/www/virtual/123.com/cgi-bin>
        AllowOverride AuthConfig
        #Options ExecCGI
        Order allow,deny
        Allow from all
    </Directory>
    # httpd dmn entry cgi support END.

    <Directory /var/www/virtual/123.com/htdocs>
        # httpd dmn entry PHP support BEGIN.
        # httpd dmn entry PHP support END.
        Options -Indexes Includes FollowSymLinks MultiViews
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>

    # httpd dmn entry PHP2 support BEGIN.
    <IfModule mod_php5.c>
        php_admin_value open_basedir "/var/www/virtual/123.com/:/var/www/virtual/123.com/phptmp/:/usr/share/php/"
        php_admin_value upload_tmp_dir "/var/www/virtual/123.com/phptmp/"
        php_admin_value session.save_path "/var/www/virtual/123.com/phptmp/"
        php_admin_value sendmail_path '/usr/sbin/sendmail -f vu2009 -t -i'
    </IfModule>
    <IfModule mod_fastcgi.c>
        ScriptAlias /php5/ /var/www/fcgi/123.com/
        <Directory "/var/www/fcgi/123.com">
            AllowOverride None
            Options +ExecCGI -MultiViews -Indexes
            Order allow,deny
            Allow from all
        </Directory>
    </IfModule>
    <IfModule mod_fcgid.c>
        Include /etc/apache2/mods-available/fcgid_ispcp.conf
        <Directory /var/www/virtual/123.com/htdocs>
            FCGIWrapper /var/www/fcgi/123.com/php5-fcgi-starter .php
            Options +ExecCGI
        </Directory>
        <Directory "/var/www/fcgi/123.com">
            AllowOverride None
            Options +ExecCGI MultiViews -Indexes
            Order allow,deny
            Allow from all
        </Directory>
    </IfModule>
    # httpd dmn entry PHP2 support END.

    Include /etc/apache2/ispcp/123.com.conf

</VirtualHost>






(04-17-2010 08:55 PM)mr.x Wrote:  Hi,

(04-17-2010 07:44 AM)Macsloverd Wrote:  Is there anyone who can help me with this?

Thanks in advance.
Please show us your config files
Br
Jan
04-18-2010 03:46 AM
Find all posts by this user Quote this message in a reply
Post Reply 


Messages In This Thread
RE: [Problem]SSL Certificate for Vitual Hosts - Macsloverd - 04-18-2010 03:46 AM

Forum Jump:


User(s) browsing this thread: 1 Guest(s)