[HOW TO] How to secure your sentora panel with SSL (HTTPS) easy guide

[mostafiz]

i follow this instruction
but i face this erorr when i restart apache
Action 'start' failed.
The Apache error log may have more information.
[fail]
* The apache2 instance did not start within 20 seconds. Please read the log files to discover problems

[Me.B]

check logs and likely you did some think wrong. Conf file must be perfect if you make any mistake apache will fail.

M B

[eagles051387]

I am still having issues where a client site still wants to use the SSL certificate that sentora is using not to mention its an entierly different domain. not sure what else to do any help would be greatly appreciated.

[Me.B]

I am still having issues where a client site still wants to use the SSL certificate that sentora is using not to mention its an entierly different domain. not sure what else to do any help would be greatly appreciated.

Please post your config files so we check them instead of repeating the same post. Give us details so we can help!!

M B

[eagles051387]

I am still having issues where a client site still wants to use the SSL certificate that sentora is using not to mention its an entierly different domain. not sure what else to do any help would be greatly appreciated.

Please post your config files so we check them instead of repeating the same post. Give us details so we can help!!

M B

Which configuration file would you like specifically?

[Me.B]

.conf under /etc/sentora/configs

[eagles051387]

my httpd config is as follows

# Sentora Apache Include file
# Written by Bobby Allen, 15/05/2011

# Set the Sentora Alias (used for development, sable will eventually use a VHOST)

#Alias

/Sentora /etc/sentora/panel

# Set a default server name for the master configuration to supress Apache daemon warnings
ServerName localhost

# Setup the directory settings and PHP security flags for the Sentora application directory.
<Directory /etc/sentora/panel>
   Options +FollowSymLinks
   DirectoryIndex index.php
   <IfModule mod_php5.c>
       AddType application/x-httpd-php .php
       php_flag magic_quotes_gpc Off
       php_flag track_vars On
       php_flag register_globals Off
       php_admin_value upload_tmp_dir /var/sentora/temp
   </IfModule>
</Directory>

# Disallow web access to directories that don't need it/that we don't want people looking in!
<Directory /etc/sentora/panel/cnf/>
   Require all denied
</Directory>
<Directory /etc/sentora/panel/modules/*/hooks>
   Require all denied
</Directory>

# Set server tokens
ServerTokens Prod

# Now we include the generic VHOST configuration file that holds all Sentora user hosted vhost data
Include /etc/sentora/configs/apache/httpd-vhosts.conf
Include /etc/sentora/configs/apache/http-panel-ssl.conf

http vhosts which are generated by sentora

################################################################
# Apache VHOST configuration file
# Automatically generated by Sentora 1.0.0
# Generated on: 15:20 8th Mar 2015 CET
#==== YOU MUST NOT EDIT THIS FILE : IT WILL BE OVERWRITTEN ====
# Use Sentora Menu -> Admin -> Module Admin -> Apache config
################################################################

Listen 80

# Configuration for Sentora control panel.
<VirtualHost *:80>
ServerAdmin zadmin@localhost
DocumentRoot "/etc/sentora/panel/"
ServerName panel URL
ErrorLog "/var/sentora/logs/sentora-error.log"
CustomLog "/var/sentora/logs/sentora-access.log" combined
CustomLog "/var/sentora/logs/sentora-bandwidth.log" common
AddType application/x-httpd-php .php
<Directory "/etc/sentora/panel/">
Options +FollowSymLinks -Indexes
   AllowOverride All
   Require all granted
</Directory>

# Custom settings are loaded below this line (if any exist)

</VirtualHost>

################################################################
# Sentora generated VHOST configurations below.....
################################################################

# DOMAIN:
<virtualhost *:80>
ServerName domain
ServerAlias  www.domain
ServerAdmin EMAIL
DocumentRoot "/var/sentora/hostdata/domain/public_html/domian"
php_admin_value open_basedir "/var/sentora/hostdata/domain/public_html/domain:/var/sentora/temp/"
php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec"
ErrorLog "/var/sentora/logs/domains/domains/domain-error.log"
CustomLog "/var/sentora/logs/domains/domains/domain-access.log" combined
CustomLog "/var/sentora/logs/domains/domains/domain-bandwidth.log" common
<Directory "/var/sentora/hostdata/domains/public_html/domain">
 Options +FollowSymLinks -Indexes
 AllowOverride All
 Require all granted
</Directory>
AddType application/x-httpd-php .php3 .php
ErrorDocument 403 /_errorpages/403.html
ErrorDocument 404 /_errorpages/404.html
ErrorDocument 510 /_errorpages/510.html
ErrorDocument 500 /_errorpages/500.html
DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm
# Custom Global Settings (if any exist)

# Custom VH settings (if any exist)

</virtualhost>
# END DOMAIN: DOMAIN
################################################################


# DOMAIN:
<virtualhost *:80>
ServerName subdomain
ServerAdmin EMAIL
DocumentRoot "/var/sentora/hostdata/Domain/public_html/subdomain"
php_admin_value open_basedir "/var/sentora/hostdata/domain/public_html/subdomain:/var/sentora/temp/"
php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec"
ErrorLog "/var/sentora/logs/domains/domain/subdomain-error.log"
CustomLog "/var/sentora/logs/domains/domain/subdomain-access.log" combined
CustomLog "/var/sentora/logs/domains/domain/subdomain-bandwidth.log" common
<Directory "/var/sentora/hostdata/domain/public_html/subdomain">
 Options +FollowSymLinks -Indexes
 AllowOverride All
 Require all granted
</Directory>
AddType application/x-httpd-php .php3 .php
ErrorDocument 403 /_errorpages/403.html
ErrorDocument 404 /_errorpages/404.html
ErrorDocument 510 /_errorpages/510.html
ErrorDocument 500 /_errorpages/500.html
DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm
# Custom Global Settings (if any exist)

# Custom VH settings (if any exist)

</virtualhost>
# END DOMAIN: DOMAIN
################################################################

SSL config file

# Configuration for Sentora control panel with SSL.
<VirtualHost *:443>
ServerAdmin email
DocumentRoot "/etc/sentora/panel/"
ServerName subdomain
ErrorLog "/var/sentora/logs/sentora-error.log"
CustomLog "/var/sentora/logs/sentora-access.log" combined
CustomLog "/var/sentora/logs/sentora-bandwidth.log" common
AddType application/x-httpd-php .php
<Directory "/etc/sentora/panel/">
Options +FollowSymLinks -Indexes
 AllowOverride All
 Require all granted
</Directory>
SSLEngine on
SSLCertificateFile /home/user/certificate/crt
SSLCertificateKeyFile /home/user/certificate/key
SSLCACertificateFile /home/user/certificate/ca-bundle

</VirtualHost>

note things have been stripped for confidentiality reasons

[eagles051387]

anyone have any suggestions as to what I have done wrong my configs are above with sensitive information removed.

[olmoigny]

fixed.

[eagles051387]

fixed.  

What was your issue?
[url=//www.pinterest.com/pin/create/extension/][/url]