This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

SSL installation
#1
SSL installation
I noticed that one has to use this method to install ssl , I have domain only ssl- not for subdomain, do i have use www.mydomain.com.crt , www.mydomain.com.key and www.mydomain.com.ca-bundle.crt? withhout http. 



SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt



SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key



SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
Reply
Thanks given by:
#2
RE: SSL installation
The certificate apply only to url's that had been declared when creating it. You can create an SSL for many domains in let's encrypt.

M B
No support using PM (Auto adding to IGNORE list!), use the forum. 
How to ask
Freelance AWS Certified Architect & SysOps// DevOps

10$ free to start your VPS
Reply
Thanks given by:
#3
RE: SSL installation
(10-02-2017, 03:54 PM)testing Wrote: I noticed that one has to use this method to install ssl , I have domain only ssl- not for subdomain, do i have use www.mydomain.com.crt , www.mydomain.com.key and www.mydomain.com.ca-bundle.crt? withhout http. 



SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt



SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key



SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt

To simplify what Me.B said you will need to create a ssl cert for your subdomain as Lets Encrypt does not yet support wildcard domains, although I did see Me.B post a thread that Lets Encrypt will support wildcard domains.
-BetaTester3.0  ||  Just Another Sentora User. 

Did you know, Sentora has a full Support Documentation ?
If I helped +rep & Thanks is appreciated.
BTC: 1Bps3ZerDFDDnXJ9XdWtHhdhwsV4MVGLkw

Reply
Thanks given by:
#4
RE: SSL installation
I had already bought the paid ssl so if i did not use it, it would be waste of money. So i actually had it installed with others help
Reply
Thanks given by:
#5
RE: SSL installation
I said the SSL is tied to an URL. You will get broken lock if you use with the wrong URL.

Get free SSL here:

https://www.sslforfree.com/

or use let's encrypt too to generate it for you.

M B
No support using PM (Auto adding to IGNORE list!), use the forum. 
How to ask
Freelance AWS Certified Architect & SysOps// DevOps

10$ free to start your VPS
Reply
Thanks given by:
#6
RE: SSL installation
I think SSL installation needs to be much more simplified and more easy to understand. I tried to understanding several times but fails to get it for CentoS.

In one section it says, installtion for domain and other section for centos. I wasn't able to get the directory path for centos in root folder.
I also couldn't understand the should i use www or without www or site.key or site_com.key. It was all too confusing. I think someone should put a example domain for easy understanding. I wanted to learn ( may be as beginner ) i think it can be more simplified.
Reply
Thanks given by:
#7
RE: SSL installation
(11-03-2017, 10:31 PM)testing Wrote: I think SSL installation needs to be much more simplified and more easy to understand. I tried to understanding several times but fails to get it for CentoS.

In one section it says, installtion for domain and other section for centos. I wasn't able to get the directory path for centos in root folder.
I also couldn't understand the should i use www or without www or site.key or site_com.key. It was all too confusing. I think someone should put a example domain for easy understanding. I wanted to learn ( may be as beginner ) i think it can be more simplified.

It can not be more simple:
Domains: http://forums.sentora.org/showthread.php?tid=2535
Sentora Login: http://forums.sentora.org/showthread.php?tid=3297
If not using Let's Encrypt, just change the file and folder paths to match your configuration. Big Grin
-TGates - Project Council

SEARCH the Forums or read the DOCUMENTATION before posting!
Support Sentora and Donate: HERE

Find my support or modules useful? Donate to TGates HERE
Developers and code testers needed!
Contact TGates for more information
Reply
Thanks given by:
#8
RE: SSL installation
/etc/pki/tls/certs
Where is this folder present. I didn't see etc forder in root.
Reply
Thanks given by:
#9
RE: SSL installation
Ok, found it. I was looking into wrong folders in root.

Now I am getting this error and can't access my site and sentora panel as well.

[root@server ~]# service httpd restart
Stopping httpd: [ OK ]
Starting httpd: Syntax error on line 31 of /etc/sentora/configs/apache/httpd-vhosts.conf:
Invalid command 'https://www.anydomain.com', perhaps misspelled or defined by a module not included in the server configuration
Reply
Thanks given by:
#10
RE: SSL installation
I think there is a issue with tutorial for ssl installation for domains "
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt

I tried this method but it didn't work for me. http://docs.sentora.org/?node=64
But then i ask someone to install it for me.
Now i noticed that he added two more lines below "SSLEngines on"
SSLEngine on
SSLCipherSuite Codes of cipher
SSLProtocol All -with ssls list
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt

And it worked. So i think it might be missing in tutorial and that may be the reason i couldn't install even after several tries.
Reply
Thanks given by:


Possibly Related Threads…
Thread Author Replies Views Last Post
New installation script and prefered Ubuntu Version? aliceprince 1 4 ,589 08-27-2019, 12:13 AM
Last Post: TGates
to clone 'sentora' installation to another machine gabriel15959 4 7 ,704 06-19-2019, 06:02 AM
Last Post: Me.B
Move Installation Complete Of Sentora To Other VPS Is Possible? fineleric 1 4 ,890 05-01-2018, 01:03 PM
Last Post: TGates

Forum Jump:


Users browsing this thread: 2 Guest(s)