I noticed that one has to use this method to install ssl , I have domain only ssl- not for subdomain, do i have use
www.mydomain.com.crt ,
www.mydomain.com.key and
www.mydomain.com.ca-bundle.crt? withhout http.
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
The certificate apply only to url's that had been declared when creating it. You can create an SSL for many domains in let's encrypt.
M B
(10-02-2017, 03:54 PM)testing Wrote: [ -> ]I noticed that one has to use this method to install ssl , I have domain only ssl- not for subdomain, do i have use www.mydomain.com.crt , www.mydomain.com.key and www.mydomain.com.ca-bundle.crt? withhout http.
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
To simplify what Me.B said you will need to create a ssl cert for your subdomain as Lets Encrypt does not yet support wildcard domains, although I did see @[Me.B] post a thread that Lets Encrypt will support wildcard domains.
I had already bought the paid ssl so if i did not use it, it would be waste of money. So i actually had it installed with others help
I said the SSL is tied to an URL. You will get broken lock if you use with the wrong URL.
Get free SSL here:
https://www.sslforfree.com/
or use let's encrypt too to generate it for you.
M B
I think SSL installation needs to be much more simplified and more easy to understand. I tried to understanding several times but fails to get it for CentoS.
In one section it says, installtion for domain and other section for centos. I wasn't able to get the directory path for centos in root folder.
I also couldn't understand the should i use www or without www or site.key or site_com.key. It was all too confusing. I think someone should put a example domain for easy understanding. I wanted to learn ( may be as beginner ) i think it can be more simplified.
(11-03-2017, 10:31 PM)testing Wrote: [ -> ]I think SSL installation needs to be much more simplified and more easy to understand. I tried to understanding several times but fails to get it for CentoS.
In one section it says, installtion for domain and other section for centos. I wasn't able to get the directory path for centos in root folder.
I also couldn't understand the should i use www or without www or site.key or site_com.key. It was all too confusing. I think someone should put a example domain for easy understanding. I wanted to learn ( may be as beginner ) i think it can be more simplified.
It can not be more simple:
Domains:
http://forums.sentora.org/showthread.php?tid=2535
Sentora Login:
http://forums.sentora.org/showthread.php?tid=3297
If not using Let's Encrypt, just change the file and folder paths to match your configuration.
/etc/pki/tls/certs
Where is this folder present. I didn't see etc forder in root.
Ok, found it. I was looking into wrong folders in root.
Now I am getting this error and can't access my site and sentora panel as well.
[root@server ~]# service httpd restart
Stopping httpd: [ OK ]
Starting httpd: Syntax error on line 31 of /etc/sentora/configs/apache/httpd-vhosts.conf:
Invalid command 'https://www.anydomain.com', perhaps misspelled or defined by a module not included in the server configuration
I think there is a issue with tutorial for ssl installation for domains "
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
I tried this method but it didn't work for me.
http://docs.sentora.org/?node=64
But then i ask someone to install it for me.
Now i noticed that he added two more lines below "SSLEngines on"
SSLEngine on
SSLCipherSuite Codes of cipher
SSLProtocol All -with ssls list
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
And it worked. So i think it might be missing in tutorial and that may be the reason i couldn't install even after several tries.