[module] SSL_manager [linux]

[eirabie]

Great module, i was able to get the ssl up and running in no time. Just one thing, it doesnt works on www. Any ideas?

[Diablo925]

At the moment no
i will try to work on a update that add www.doamin.tld to the certificate

[rocky123xo]

Still doesn't work for me. And now it's screwed up all my domains. All HTTPS redirects to this, the default CentOS page:
https://bwlservers.com/

The setting isn't in the Sentora VHOSTS file... Where is it? I need to fix this.

[launchsolution]

Invalid command 'IncludeOptional', perhaps misspelled or defined by a module not included in the server configuration

MarkDark found a fix for it, but I got another error right after, then I kinda fixed it and made this tutorial so people can easily follow, until we get an official fix, at least it worked for me!
Currently using Ubuntu 12.04.5
Instructions below:

---

Part I
Open the file: /etc/sentora/configs/apache/httpd.conf 

Search for this (probably near the last line):
IncludeOptional /etc/sentora/configs/apache/users_ssl/*.conf


Replace it to:
Include /etc/sentora/configs/apache/users_ssl/*.conf

Now try to restart apache:
service apache2 restart

If it said something about TLS and failed to restart, continue to part 2.
If it didn't and apache restarted successfully, you're done here.

---

Part II
Open the file: /etc/sentora/panel/modules/SSL_manager/code/controller.ext.php

Search for this (around line 180):
$write = "SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2\n"; 


Replace it to:
$write = "SSLProtocol All -SSLv2 -SSLv3\n";
Now go back to your control panel and remove the SSLs you added, and add them back, so it uses the updated code.

You're DONE!

Don't forget to restart apache!
service apache2 restart

---

WARNING: Maybe this change to the SSL mode created a security problem, maybe not, I'm not an expert at this, but it worked for me

I have only installed this today and it is stopping apache from restarting. I have checked your fix and applied and it gives this error

Starting httpd: Syntax error on line 5 of /etc/sentora/configs/apache/users_ssl/vps198612.ovh.net.conf:

Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in the server configuration

Any help would be great

[Diablo925]

Enable you SSL module to apache and it Works

https://chrisjean.com/adding-ssl-support...on-centos/

[TGates]

I have been working on a community member's server trying to get this module to work. After investigating it a bit, the process being used is confusing and complicated code-wise.

I'm curious why you used individual ssl host files for each domain rather than the much simpler way of just adding it to the database for '# Custom VH settings (if any exist)' (DB table: vh_custom_tx) as a virtual host override and use the built in port override feature? In my current testing, the domain's vhost is called twice, once in the original httpd-vhosts.conf and then again in the created users-ssl file. Apache only reads the first one it comes too and ignores any others.

Basically, just put this code in the table mentioned above for the domain/sub domain instead of an external file and use the port override (443):

Code:

SSLEngine on
SSLCertificateFile /var/sentora/hostdata/zadmin/ssl/domain_com/domain.com.crt
SSLCertificateKeyFile /var/sentora/hostdata/zadmin/ssl/domain_com/domain.com.key
SSLCACertificateFile /var/sentora/hostdata/zadmin/ssl/domain_com/intermediate.crt
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
<Directory '/var/sentora/hostdata/zadmin/public_html/domain_com/'>
Options +FollowSymLinks -Indexes
AllowOverride All
Require all granted
</Directory>

This would save a lot of other issues like rewriting the httpd.conf file, adding the extra folder users_ssl and the creation of the individual domain ssl files
Your thoughts?

[Diablo925]

I work on a New version but have a lot of work

[TGates]

I work on a New version but have a lot of work

Ok Diablo, looking forward to the next version

[MarkDark]

I subscribe! I look forward to the new version!

[bbspike]

Me too..its a very important feature for a cpanel.... it should be there...