secure sentora with https?

[SupaYoshi]

Requirement here.

Having your SSL certificate issued & ok.

Basic knowledge over apache admin & conf files.

1. create a new file for panel SSL Setup:
/etc/sentora/configs/http-panel-ssl.conf

Code:

Listen 443
# Configuration for Sentora control panel with SSL.
<VirtualHost *:443>
ServerAdmin zadmin@localhost
DocumentRoot "/etc/sentora/panel/"
ServerName panel.FQDNN
ErrorLog "/var/sentora/logs/sentora-error.log"
CustomLog "/var/sentora/logs/sentora-access.log" combined
CustomLog "/var/sentora/logs/sentora-bandwidth.log" common
AddType application/x-httpd-php .php
<Directory "/etc/sentora/panel/">
Options +FollowSymLinks -Indexes
   AllowOverride All
   Order allow,deny
   Allow from all
</Directory>
SSLEngine on
  SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2
  SSLCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM;^M    SSLHonorCipherOrder on
  SSLCertificateFile /etc/sentora/configs/ssl/sentora.crt
  SSLCertificateKeyFile /etc/sentora/configs/ssl/sentora.pem
  SSLCertificateChainFile /etc/sentora/configs/ssl/sentora.crt
</VirtualHost>

you need to replace : ServerName panel.FQDNN with your panel sub domain you had setup.

You will notice we need 3 files here for your SSL ( you can change the path if you want):

 SSLCertificateFile /etc/sentora/configs/ssl/sentora.crt
  SSLCertificateKeyFile /etc/sentora/configs/ssl/sentora.pem
  SSLCertificateChainFile /etc/sentora/configs/ssl/sentora.crt

Once this config file setup.

You can include it in the main apache conf file would be last one after all previous sentora include files.

Once you do the setup and add this file your panel can be accessed using 80 & port 443 under HTTPS on the same time. Up to you then using a .htaccess to enforce https or leave it.

Would this be ok & clear?

M B

I've done everything as you said, works good but now I get 503, Forbidden error when I go to the https website.


EDIT: After i removed the Order allow,deny
from the config you gave me it works,

My config now looks like this exactly the same as the config does for the normal sentura panel.

Few changes I made,
- Why do you include a file that is in the root directory /etc/sentura/configs/ why not put it next to the other ones? /etc/sentura/configs/apache/ ? I made it include this way.

Code:

# Include SSL thingy for panel
Include /etc/sentora/configs/apache/http-panel-ssl.conf

- I do the SSL protocol a little different, I do this,

Code:

SSLProtocol all -SSLv2 -SSLv3
        SSLHonorCipherOrder on
        SSLCipherSuite "CDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5"

This because SSLv2 and SSLv3 are vulnerable to poodle attacks please edit that.

Code:

Listen 443
# Configuration for Sentora control panel with SSL.
<VirtualHost *:443>
ServerAdmin zadmin@localhost
DocumentRoot "/etc/sentora/panel/"
ServerName domain.something.something
ErrorLog "/var/sentora/logs/sentora-error.log"
CustomLog "/var/sentora/logs/sentora-access.log" combined
CustomLog "/var/sentora/logs/sentora-bandwidth.log" common
AddType application/x-httpd-php .php
<Directory "/etc/sentora/panel/">
Options +FollowSymLinks -Indexes
   AllowOverride All
#   Order allow,deny
   Require all granted
</Directory>
SSLEngine on
#  SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2
#  SSLCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM;^M    SSLHonorCipherOrder on
  SSLCertificateFile /etc/apache2/ssl/cert.crt
  SSLCertificateKeyFile /etc/apache2/ssl/cert.key
  SSLCACertificateFile /etc/apache2/ssl/rootca.crt

</VirtualHost>