WHO WANNA SSL HELP WITH HTTPD and MORE...

[ogika]

I offer triks for  Sentora to not affect the httpd file. 

only using include .
free ssl certificate : https://www.sslforfree.com/
easy and fast.

[Me.B]

The website is not what it advertise as it rely on let's encrypt. Just check it's own certificate.

M B

[debasis]

I was trying to use SSL for my Domain but it didn't work. Can you please guide me how to make my server compatible for ssl?
Thanks.

[ogika]

ok then u have to create a separated file for the ssl.

so you need to go here  /etc/sentora/configs/apache
and create a file like yourname-ssl.conf
and u need to write a line like : Include /etc/sentora/configs/apache/ogi.conf in the file httpd.conf
in the bottom . you will see the this line
# Now we include the generic VHOST configuration file that holds all Sentora user hosted vhost data
Include /etc/sentora/configs/apache/httpd-vhosts.conf
Include /etc/sentora/configs/apache/ogi.conf  -  this is my line
so after that you will need to use this code but you need to customize it for each domain you wanna to add for ssl; and you need to generate from a website or to buy a ssl certif... ATENTION when u buy the ssl certificate bui it with this form first to bee yourdomain.com and after www.yourudomain.com because if not pul like that every time you go on the website you need to user www in front of your domain..

#############################################################################

Code:

<VirtualHost yourdomain.com:443>
ServerName yourdomain.com
ServerAlias  www.yourdomain.com
ServerAdmin host@yourdomain.com
DocumentRoot "/var/sentora/hostdata/username/public_html"
php_admin_value open_basedir "/var/sentora/hostdata/username/public_html:/var/sentora/temp/"
php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec"
ErrorLog "/var/sentora/logs/domains/username/yourdomain.com-error.log"
CustomLog "/var/sentora/logs/domains/username/yourdomain.com-access.log" combined
CustomLog "/var/sentora/logs/domains/username/yourdomain.com-bandwidth.log" common
<Directory "/var/sentora/hostdata/username/public_html">
 Options +FollowSymLinks -Indexes
 AllowOverride All
 Require all granted
</Directory>
AddType application/x-httpd-php .php3 .php
DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm
# Custom Global Settings (if any exist)
SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile "/var/sentora/hostdata/username/cert/2_yourdomain.com.crt"
SSLCertificateKeyFile "/var/sentora/hostdata/username/cert/yourdomain.com.key"
SSLCertificateChainFile "/var/sentora/hostdata/username/cert/1_root_yourdomain.com.crt"
</VirtualHost>

#############################################################################
this is the code from the yourname.conf put separation like this begind and of any domain to know copy with ######## all oke than modify your user path
so you need to modify all the username and i recomand to do not put ssl certificates into the root directory for each domain i recomand to put in the user directory like u see i maded a folder cert for each domain.

and the final steps are this
puth this code in every domain .htaccess for forcing the https

Code:

RewriteEngine on
RewriteCond %{HTTP_HOST} ^www\.yourdomain\.com [NC]
RewriteRule ^(.*)$ https://yourdomain.com$1 [L,R=301]
# Force SSL - Always first Rewrite Rule!
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://yourdomain.com/$1 [R,L]

you need to change yourdomain on the first do not remove \ \ from domain put the name of your domain and change extension     .
after that give the command : server httpd reload

and thats it

if u canot do it i will offer support with team view
only you need to contact me on my e-mail : ogi@ogi.ro
and i will help

Best Regards
oGi