ispCP - Board - Support - VHCS fork / ispCP Omega Development Area / General discussion / How to install certificate SSL TRUSTED

Post Reply  Post Thread 
How to install certificate SSL TRUSTED
Author Message
natural
Junior Member
*


Posts: 16
Group: Registered
Joined: Apr 2008
Status: Offline
Reputation: 0
Post: #1
How to install certificate SSL TRUSTED

Hello everybody ,
I have buy a ssl certificat and i have try to install it with your instruction in the HOW TO but the install ssl don't work.
I have the .key , .crt and the chain.crt

What does i have to do to install this certificat ?
Could you explain me step by step please Smile

Thanks you very much

04-25-2008 06:21 AM
Find all posts by this user Quote this message in a reply
platzwart
Junior Member
*


Posts: 90
Group: Registered
Joined: Mar 2007
Status: Offline
Reputation: 1
Post: #2
RE: How to install certificate SSL TRUSTED

ask the people that sold the certificate...

Debian Etch 32bit
snapshot 08-08-08
Root-Server
04-25-2008 06:32 AM
Find all posts by this user Quote this message in a reply
joximu
Moderator
*****


Posts: 3,534
Group: Moderators
Joined: Jan 2007
Status: Offline
Reputation: 47
Post: #3
RE: How to install certificate SSL TRUSTED

addon: ispcp does not need a special treatment in the apache config, just the normal with fastcgi etc.

So the certificate seller should help you.

2008-03-16 ispCP RC4 released!!!
04-25-2008 06:50 AM
Visit this user's website Find all posts by this user Quote this message in a reply
natural
Junior Member
*


Posts: 16
Group: Registered
Joined: Apr 2008
Status: Offline
Reputation: 0
Post: #4
RE: How to install certificate SSL TRUSTED

joximu Wrote:
addon: ispcp does not need a special treatment in the apache config, just the normal with fastcgi etc.

So the certificate seller should help you.


My problem after install is :

Quote:
[Thu Apr 24 17:59:39 2008] [error] [client 85.241.137.217] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): *
[Thu Apr 24 18:01:20 2008] [notice] caught SIGTERM, shutting down
[Thu Apr 24 18:02:44 2008] [error] Unable to configure RSA server private key
[Thu Apr 24 18:02:44 2008] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu Apr 24 18:02:56 2008] [error] Unable to configure RSA server private key
[Thu Apr 24 18:02:56 2008] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu Apr 24 18:03:08 2008] [error] Unable to configure RSA server private key
[Thu Apr 24 18:03:08 2008] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu Apr 24 18:03:36 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Thu Apr 24 18:03:37 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Thu Apr 24 18:03:37 2008] [notice] FastCGI: process manager initialized (pid 22557)

Anybody have an idea to help me ?

Best regards ,
Quentin

04-25-2008 07:31 PM
Find all posts by this user Quote this message in a reply
joximu
Moderator
*****


Posts: 3,534
Group: Moderators
Joined: Jan 2007
Status: Offline
Reputation: 47
Post: #5
RE: How to install certificate SSL TRUSTED

Hi Quentin

this is really not an ispCP issue. Maybe someone reads here which has some special knowledge with certificates - but maybe not.

I recommend: ask the reseller and maybe in a more Apache-SSL/TLS-Certs specialized forum. Maybe also your favorties search engine helps if you search for the error numbers/error messages

/Joximu

2008-03-16 ispCP RC4 released!!!
04-26-2008 12:27 AM
Visit this user's website Find all posts by this user Quote this message in a reply
Tseng
Junior Member
*


Posts: 20
Group: Registered
Joined: Apr 2008
Status: Offline
Reputation: 0
Post: #6
RE: How to install certificate SSL TRUSTED

Hi,

it means you are either using the wrong certificate or the wrong key. Compare the two using

Code:
openssl x509 -noout -text -in certfile -modulus

to check the cerificate, and

Code:
openssl rsa -noout -text -in keyfile -modulus

to check the keyfile. Now the "modulus" and the "public exponent" must match exactly. Make sure you don't have trailing spaces in your files.

Hope this helps,

Tseng

04-26-2008 01:23 AM
Find all posts by this user Quote this message in a reply
natural
Junior Member
*


Posts: 16
Group: Registered
Joined: Apr 2008
Status: Offline
Reputation: 0
Post: #7
RE: How to install certificate SSL TRUSTED

I have some other bugs :

Quote:
[Fri Apr 25 21:47:11 2008] [notice] Graceful restart requested, doing restart
[Fri Apr 25 21:47:11 2008] [error] [client 127.0.0.1] File does not exist: /htdocs
[Fri Apr 25 21:47:11 2008] [error] (9)Bad file descriptor: apr_socket_accept: (client socket)
[Fri Apr 25 21:47:11 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Fri Apr 25 21:47:11 2008] [notice] FastCGI: process manager initialized (pid 25143)
[Fri Apr 25 21:47:11 2008] [warn] FastCGI: server "/var/www/fcgi/master/php5-fcgi-starter" (uid 2000, gid 2000) started (pid 25144)
[Fri Apr 25 21:47:11 2008] [notice] Apache configured -- resuming normal operations
[Fri Apr 25 21:47:13 2008] [notice] caught SIGTERM, shutting down
[Fri Apr 25 21:47:15 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Fri Apr 25 21:47:16 2008] [notice] FastCGI: wrapper mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Fri Apr 25 21:47:16 2008] [notice] FastCGI: process manager initialized (pid 25279)
[Fri Apr 25 21:47:16 2008] [warn] FastCGI: server "/var/www/fcgi/master/php5-fcgi-starter" (uid 2000, gid 2000) started (pid 25280)
[Fri Apr 25 21:47:16 2008] [notice] Apache configured -- resuming normal operations
[Fri Apr 25 21:47:47 2008] [warn] FastCGI: (dynamic) server "/var/www/fcgi/prixmalins.net/php5-fcgi-starter" (uid 2002, gid 2002) started (pid 26297)
[Fri Apr 25 21:48:47 2008] [warn] FastCGI: (dynamic) server "/var/www/fcgi/hebergeons.net/php5-fcgi-starter" (uid 2001, gid 2001) started (pid 28226)


What does is mean ?
What can i do ?

Quentin

04-26-2008 05:55 AM
Find all posts by this user Quote this message in a reply
natural
Junior Member
*


Posts: 16
Group: Registered
Joined: Apr 2008
Status: Offline
Reputation: 0
Post: #8
RE: How to install certificate SSL TRUSTED

Apache don't start when i put this lines in my config file

Quote:
NameVirtualHost 87.98.181.189:443

<VirtualHost 87.98.181.189:443>

SSLEngine on
SSLCertificateFile /etc/apache2/ssl.crt/certificat.crt
SSLCertificateKeyFile /etc/apache2/ssl.crt/deprotected.key
SSLCACertificateFile /etc/apache2/ssl.crt/certificat-chain.crt


But if i write #SSLEngine on , it's start ..
What can i have to do ?

04-26-2008 06:06 AM
Find all posts by this user Quote this message in a reply
Post Reply  Post Thread 

View a Printable Version
Send this Thread to a Friend
Subscribe to this Thread | Add Thread to Favorites
Forum Jump:

Contact Us | isp Control Panel ( ispCP ) a VHCS fork | Return to Top | Return to Content | Lite (Archive) Mode | RSS Syndication

| All rights reserved : isp-control.net |