SSL installation

[testing]

I noticed that one has to use this method to install ssl , I have domain only ssl- not for subdomain, do i have use www.mydomain.com.crt , www.mydomain.com.key and www.mydomain.com.ca-bundle.crt? withhout http. 



SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt



SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key



SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt

[Me.B]

The certificate apply only to url's that had been declared when creating it. You can create an SSL for many domains in let's encrypt.

M B

[betatester3.0]

I noticed that one has to use this method to install ssl , I have domain only ssl- not for subdomain, do i have use www.mydomain.com.crt , www.mydomain.com.key and www.mydomain.com.ca-bundle.crt? withhout http. 



SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt



SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key



SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt

To simplify what Me.B said you will need to create a ssl cert for your subdomain as Lets Encrypt does not yet support wildcard domains, although I did see Me.B post a thread that Lets Encrypt will support wildcard domains.

[testing]

I had already bought the paid ssl so if i did not use it, it would be waste of money. So i actually had it installed with others help

[Me.B]

I said the SSL is tied to an URL. You will get broken lock if you use with the wrong URL.

Get free SSL here:

https://www.sslforfree.com/

or use let's encrypt too to generate it for you.

M B

[testing]

I think SSL installation needs to be much more simplified and more easy to understand. I tried to understanding several times but fails to get it for CentoS.

In one section it says, installtion for domain and other section for centos. I wasn't able to get the directory path for centos in root folder.
I also couldn't understand the should i use www or without www or site.key or site_com.key. It was all too confusing. I think someone should put a example domain for easy understanding. I wanted to learn ( may be as beginner ) i think it can be more simplified.

[TGates]

I think SSL installation needs to be much more simplified and more easy to understand. I tried to understanding several times but fails to get it for CentoS.

In one section it says, installtion for domain and other section for centos. I wasn't able to get the directory path for centos in root folder.
I also couldn't understand the should i use www or without www or site.key or site_com.key. It was all too confusing. I think someone should put a example domain for easy understanding. I wanted to learn ( may be as beginner ) i think it can be more simplified.

It can not be more simple:
Domains: http://forums.sentora.org/showthread.php?tid=2535
Sentora Login: http://forums.sentora.org/showthread.php?tid=3297
If not using Let's Encrypt, just change the file and folder paths to match your configuration.

[testing]

/etc/pki/tls/certs
Where is this folder present. I didn't see etc forder in root.

[testing]

Ok, found it. I was looking into wrong folders in root.

---

Now I am getting this error and can't access my site and sentora panel as well.

[root@server ~]# service httpd restart
Stopping httpd: [ OK ]
Starting httpd: Syntax error on line 31 of /etc/sentora/configs/apache/httpd-vhosts.conf:
Invalid command 'https://www.anydomain.com', perhaps misspelled or defined by a module not included in the server configuration

[testing]

I think there is a issue with tutorial for ssl installation for domains "
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt

I tried this method but it didn't work for me. http://docs.sentora.org/?node=64
But then i ask someone to install it for me.
Now i noticed that he added two more lines below "SSLEngines on"
SSLEngine on
SSLCipherSuite Codes of cipher
SSLProtocol All -with ssls list
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt

And it worked. So i think it might be missing in tutorial and that may be the reason i couldn't install even after several tries.