This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

Secure Sentora With SSLForFree
#1
Secure Sentora With SSLForFree
I have written a quick tutorial on how to secure your Sentora Control Panel with SSLForFree SSL Certificates.

This is a quick tutorial and im just demostrating how i use these certificates for my panel and websites and the tutorial is designed for CentOS 6 Minimal If ive missed anything let me know as i was rushed.

Securing Sentora Panel via SSLForFree

This guide is designed for CentOS 6 Minimal

Step 1: Install Sentora once installed follow this guide.

Step 2: Login to your server via SSH using Putty

Step 3: Install OpenSSL and Mod_SSL using the following commands:

OpenSSL: yum install openssl

Mod_SSL: yum install mod_ssl

Once this is complete resart apache using service httpd restart

Step 4: Login to your server using FlashFXP or SFTP using FTP/SSH port 22 with your servers root username and password

Step 5: Once logged in go to /etc/sentora/panel/ and create a new folder named .well-known inside this folder create another folder called acme-challenge.

Once this is comple your full path should be /etc/sentora/pane/.well-known/acme-challenge/

Step 6: Go to https://www.sslforfree.com and create a new domain ie:panel.domain.com (yourdomain.com/panel) and click Manual Verfication and download your verification key (do not close your browser window).

Step 7: Upload this downloaded verification key to /etc/sentora/panel/.well-known/acme-challenge/ once this is done go back to the start SSL Page and click the verification link, Upon clicking this link it should take you to panel.yourdomain.com/obsecureverificationkey (random letters and numbers)

Step 8: Once step 7 is complete download your SSL Certificate and extract the SSLforFree.zip file, Inside this folder you will have three (3) files one cerificate, one private and one bundle (we are only going to use the Cerificate.crt and Private.key files)

For ease of use please rename the certificate.crt and private.key files to panel_domain_com_certificate.crt and panel_domain_com_private.key this is to just keep others ssl certificates seperate and easier to find when you add more later.

Step 9: With these files downloaded and renamed upload the panel_domain_com.crt to /etc/pki/tls/certs/ and upload the panel_domain_com_private.key to /etc/pki/tls/private/

Then go to /etc/httpd/conf.d/ and download your ssl.conf file.

Step 10: Open your newly downloaded ssl.conf file with WordPanel and scroll down to the bottom and add the following replacing with your details:

NameVirtualHost serverip:443

<VirtualHost serverip:443>
ServerName panel.domain.com
ServerAlias panel.domain.com
DocumentRoot /etc/sentora/panel/
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/panel_domain_com_certificate.crt
SSLCertificateKeyFile /etc/pki/tls/private/panel_domain_com_private.key
</VirtualHost>

and save your new ssl.conf and reupload replacing your current ssl.conf file.

Step 11: go back to putty and restart your apache with service httpd restart if everything went well your with an OK resart once done open your browser and go to https://panel.domain.com and your panel should be secured via SSL
Reply
Thanks given by:
#2
RE: Secure Sentora With SSLForFree
Over the web you will find many certificate providers who offer SSL Certificates for Free.

Without SSL certificate your website visitors will face problems when they enter into your website.

SSL certificates can be expensive but they are necessary too. You have several options to get Free SSL Certificates for your website.

The following are the options available to you if you want to try Free SSL Certificates:

https://www.freesslcertificate.org/ - Offers Premium SSL Certificates for Free from trusted SSL Certificate providers.

Lets Encrypt: An open automated certificate authority with easy to install process but it has some of the cons that you will not like.
Reply
Thanks given by:


Possibly Related Threads…
Thread Author Replies Views Last Post
Secure Sentora Domains with Let's Encrypt TGates 27 97 ,359 06-08-2024, 05:06 PM
Last Post: andykimpe
Fail2ban for Sentora (Centos 7) bbspike 14 48 ,784 01-14-2020, 07:32 AM
Last Post: Vedran B
Timeout for Sentora Admin Panel minufreelance 12 48 ,926 11-24-2018, 12:33 PM
Last Post: fearworks

Forum Jump:


Users browsing this thread: 1 Guest(s)