+- Sentora Support Forums (https://senforums.mach-hosting.com)
+-- Forum: Sentora Forum Archives (https://senforums.mach-hosting.com/forumdisplay.php?fid=5)
+--- Forum: Sentora Public Support Forums v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=32)
+---- Forum: General Support Forum v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=36)
+---- Thread: SSL installation (/showthread.php?tid=4062)
Pages:
1
2
SSL installation - testing - 10-02-2017
I noticed that one has to use this method to install ssl , I have domain only ssl- not for subdomain, do i have use www.mydomain.com.crt , www.mydomain.com.key and www.mydomain.com.ca-bundle.crt? withhout http.
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
RE: SSL installation - Me.B - 10-02-2017
The certificate apply only to url's that had been declared when creating it. You can create an SSL for many domains in let's encrypt.
M B
RE: SSL installation - betatester3.0 - 10-02-2017
(10-02-2017, 03:54 PM)testing Wrote: I noticed that one has to use this method to install ssl , I have domain only ssl- not for subdomain, do i have use www.mydomain.com.crt , www.mydomain.com.key and www.mydomain.com.ca-bundle.crt? withhout http.
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
To simplify what Me.B said you will need to create a ssl cert for your subdomain as Lets Encrypt does not yet support wildcard domains, although I did see @[Me.B] post a thread that Lets Encrypt will support wildcard domains.
RE: SSL installation - testing - 10-05-2017
I had already bought the paid ssl so if i did not use it, it would be waste of money. So i actually had it installed with others help
RE: SSL installation - Me.B - 10-05-2017
I said the SSL is tied to an URL. You will get broken lock if you use with the wrong URL.
Get free SSL here:
https://www.sslforfree.com/
or use let's encrypt too to generate it for you.
M B
RE: SSL installation - testing - 11-03-2017
I think SSL installation needs to be much more simplified and more easy to understand. I tried to understanding several times but fails to get it for CentoS.
In one section it says, installtion for domain and other section for centos. I wasn't able to get the directory path for centos in root folder.
I also couldn't understand the should i use www or without www or site.key or site_com.key. It was all too confusing. I think someone should put a example domain for easy understanding. I wanted to learn ( may be as beginner ) i think it can be more simplified.
RE: SSL installation - TGates - 11-04-2017
(11-03-2017, 10:31 PM)testing Wrote: I think SSL installation needs to be much more simplified and more easy to understand. I tried to understanding several times but fails to get it for CentoS.
In one section it says, installtion for domain and other section for centos. I wasn't able to get the directory path for centos in root folder.
I also couldn't understand the should i use www or without www or site.key or site_com.key. It was all too confusing. I think someone should put a example domain for easy understanding. I wanted to learn ( may be as beginner ) i think it can be more simplified.
It can not be more simple:
Domains: http://forums.sentora.org/showthread.php?tid=2535
Sentora Login: http://forums.sentora.org/showthread.php?tid=3297
If not using Let's Encrypt, just change the file and folder paths to match your configuration.
RE: SSL installation - testing - 11-04-2017
/etc/pki/tls/certs
Where is this folder present. I didn't see etc forder in root.
RE: SSL installation - testing - 11-04-2017
Ok, found it. I was looking into wrong folders in root.
Now I am getting this error and can't access my site and sentora panel as well.
[root@server ~]# service httpd restart
Stopping httpd: [ OK ]
Starting httpd: Syntax error on line 31 of /etc/sentora/configs/apache/httpd-vhosts.conf:
Invalid command 'https://www.anydomain.com', perhaps misspelled or defined by a module not included in the server configuration
RE: SSL installation - testing - 11-05-2017
I think there is a issue with tutorial for ssl installation for domains "
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
I tried this method but it didn't work for me. http://docs.sentora.org/?node=64
But then i ask someone to install it for me.
Now i noticed that he added two more lines below "SSLEngines on"
SSLEngine on
SSLCipherSuite Codes of cipher
SSLProtocol All -with ssls list
SSLCertificateFile /etc/pki/tls/certs/Sentora.id-network.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/Sentora.id-network.org.key
SSLCACertificateFile /etc/pki/tls/certs/Sentora.id-network.org.ca-bundle.crt
And it worked. So i think it might be missing in tutorial and that may be the reason i couldn't install even after several tries.