[MODULE] Certificate Manager

[bbspike]

Hi,

I have some issues with the way CertM implements ssl.

First its not working with varnish. 
Sentora doen't look at wich port for apache is configured in "Sentora apache settings", so the setting "vhost override port" the port is still 80. Certm takes this over and break the virual host by this. 

This is an issue for sentora i believe to look in setting for the right override port.

Second the way ssl is now implementen in "vhost custom settings" you cannot use any "global vhost settings" configured in sentora anymore. I had global vhost entry set voor webmail (webmail.*) and in break up vhosts and thus apache..

I believe its better if CertM creates whole new vhosts entry's listing to 443 instead of adding it into custom settings voor a vhost created to listen to port 80 or 8080 in case of my settup with varnish:

Example:

Sentora creates a :80 vhosts:

Code:

# DOMAIN: ldehooge.nl <virtualhost *:8080> ServerName ldehooge.nl ServerAlias  www.ldehooge.nl ServerAdmin 83ffb53a@opayq.com DocumentRoot "/var/sentora/hostdata/webimproved/public_html/ldehooge_nl" php_admin_value open_basedir "/var/sentora/hostdata/webimproved/public_html/ldehooge_nl:/var/sentora/temp/" php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec" ErrorLog "/var/sentora/logs/domains/webimproved/ldehooge.nl-error.log" CustomLog "/var/sentora/logs/domains/webimproved/ldehooge.nl-access.log" combined CustomLog "/var/sentora/logs/domains/webimproved/ldehooge.nl-bandwidth.log" common <Directory "/var/sentora/hostdata/webimproved/public_html/ldehooge_nl">  Options +FollowSymLinks -Indexes  AllowOverride All  Order Allow,Deny  Allow from all </Directory> AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript AddType application/x-httpd-php .php3 .php DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm # Custom Global Settings (if any exist) </VirtualHost>^M ^M # Configuration for WebMail^M <VirtualHost *:8080>^M ServerAlias webmail.* ^M DocumentRoot "/etc/sentora/panel/etc/apps/webmail/"^M AddType application/x-httpd-php .php^M <Directory "/etc/sentora/panel/etc/apps/webmail/">^M Options +FollowSymLinks -Indexes^M AllowOverride All^M </Directory> # Custom VH settings (if any exist) </virtualhost> # END DOMAIN: ldehooge.nl ################################################################

Let CertM Create a seperate 443 vhost in the same file sentora does:

Code:

# DOMAINSSL: ldehooge.nl <VirtualHost *:443> ServerName ldehooge.nl [size=small][font=Monaco, Consolas, Courier, monospace]ServerAlias  www.ldehooge.nl[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]ServerAdmin 83ffb53a@opayq.com[/font][/size] DocumentRoot "/var/sentora/hostdata/webimproved/public_html/ldehooge_nl" SSLEngine on SSLCertificateFile /etc/pki/tls/certs/www.ldehooge.nl.crt SSLCertificateKeyFile /etc/pki/tls/private/www.ldehooge.key SSLCertificateChainFile /etc/pki/tls/certs/CA_Intermediate.cert SSLCACertificateFile /etc/pki/tls/certs/CA_Root.cert php_admin_value open_basedir "/var/sentora/hostdata/webimproved/public_html/ldehooge_nl:/var/sentora/temp/" [size=small][font=Monaco, Consolas, Courier, monospace]php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec"[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]ErrorLog "/var/sentora/logs/domains/webimproved/ldehooge.nl-error.log"[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]CustomLog "/var/sentora/logs/domains/webimproved/ldehooge.nl-access.log" combined[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]CustomLog "/var/sentora/logs/domains/webimproved/ldehooge.nl-bandwidth.log" common[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]<Directory "/var/sentora/hostdata/webimproved/public_html/ldehooge_nl">[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]  Options +FollowSymLinks -Indexes[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]  AllowOverride All[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]  Order Allow,Deny[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]  Allow from all[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]</Directory>[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]AddType application/x-httpd-php .php3 .php[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]# Custom Global Settings (if any exist)[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]</VirtualHost>^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]# Configuration for WebMail^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]<VirtualHost *:8080>^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace] ServerAlias webmail.* ^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace] DocumentRoot "/etc/sentora/panel/etc/apps/webmail/"^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace] AddType application/x-httpd-php .php^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace] <Directory "/etc/sentora/panel/etc/apps/webmail/">^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace] Options +FollowSymLinks -Indexes^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace] AllowOverride All^M[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace] </Directory>[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]# Custom VH settings (if any exist)[/font][/size] [size=small][font=Monaco, Consolas, Courier, monospace]</virtualhost>[/font][/size] # END DOMAINSSL: ldehooge.nl

This way a domain can be reached both ports and the user can choose with url's needs to be ssl or not.
Also any global vhosts entry's will not break up and will be automatic implement with the ssl vhosts also.


Ofcouse the sentora vhosts file als needs a listing to 443 rule.