cpanel SSL certificate?

[ckizer]

I want to purchase and install a certificate for the /securecontrolpanel/ URL i have all my users (we setup /ctrl) go through the control panel securly, but many of the customers are upset because the SSL says that it's not for this domain (they think it is a security risk) is it possible to have a certificate for this? And if so how do I go about installing it?

I already have a certificate for my secure signups, I assume i will need another one.



[Edited on 8/13/01 by ckizer]

 

[bdraco]

[quote:7c365cf822]I want to purchase and install a certificate for the /securecontrolpanel/ URL i have all my users (we setup /ctrl) go through the control panel securly, but many of the customers are upset because the SSL says that it\'s not for this domain (they think it is a security risk) is it possible to have a certificate for this? And if so how do I go about installing it?

I already have a certificate for my secure signups, I assume i will need another one.



[Edited on 8/13/01 by ckizer] [/quote:7c365cf822]

The pem file is in /usr/local/cpanel/etc/cpanel.pem

Just chattr it +i after you install it so the cpanel install doesn\'t overwrite it.

 

[ckizer]

lol, sorry that went over my head. can i use the certificate I have now? I use it for secure signups and such, if not how should i generate the CRM for this (whm?)

 

[bdraco]

[quote:8821658cd5]lol, sorry that went over my head. can i use the certificate I have now? I use it for secure signups and such, if not how should i generate the CRM for this (whm?) [/quote:8821658cd5]

If you have out from thawte just login and download a PEM certificate and copy it to the location mentioned

 

[ckizer]

I\'m guessing this won\'t work with my certificate from equifax?

 

[ckizer]

also how do i find out the path to tell customers to call their site securely?

 

[teck]

Won't https://www.sharpwebinnovations.com/~userlogin work?

Also, Court, can you tell me how you installed the Equifax cert? I'm getting one soon and I might need help since I heard it was tricky. Feel free to email me if you wish

[Edited on 8/13/01 by teck]

 

[ckizer]

Actually Matt@site5 did it for me on our dedicated box.

 

[smilb]

Just did mine, its not that hard. You need to edit two things. The cert itself and the key. Copy this /usr/local/cpanel/etc/cpanel.pem and edit the cert and key. Both are in the one file. Put the edited cpanel.pem back, restart ssl. You will be happy to get rid of localhost.......Also do as Nick said and lock the file so it won\'t be overwritten on next update.......

 

[moronhead]

[quote:b17bcb8fee] Just did mine, its not that hard. You need to edit two things. The cert itself and the key. Copy this /usr/local/cpanel/etc/cpanel.pem and edit the cert and key. Both are in the one file. Put the edited cpanel.pem back, restart ssl. You will be happy to get rid of localhost....... [/quote:b17bcb8fee]

What info do I put in the cert and key sections of the pem file? And where do I get it from?

 

[smilb]

I got my cert from www.freessl.com......replace your key and cert for the one in cpanel.pem

[Edited on 8/16/01 by smilb]

 

[moronhead]

smlib,

[quote:c1b409cb0a] I got my cert from www.freessl.com......replace your key and cert for the one in cpanel.pem [/quote:c1b409cb0a]
I couldn\'t quite get that. Did you replace the contents of your key and freessl cert with the contents in cpanel.pem? Or is it the other way around?

 

[smilb]

Put your key in cpanel.pem replace the one that is there.

Put your cert in cpanel.pem replace the one that is there.

Put the file back....

The pem file is in /usr/local/cpanel/etc/cpanel.pem

Just chattr it +i after you install it so the cpanel install doesn\'t overwrite it.

 

[moronhead]

[quote:cc37e92f0c]Just chattr it +i after you install it so the cpanel install doesn\'t overwrite it. [/quote:cc37e92f0c]
Thanks smilb. I\'ve got it now.

The freessl seems to be a good option. I only wish it would also work with Netscape, although apparently it will soon.

 

[Karl]

smilb - I just tried your instructions and it doesn\'t work for me. CPanel just sits there and hangs on Starting CPanel ssl services.

 

[Brad]

Use port 2083

[quote:17ee3410b1]smilb - I just tried your instructions and it doesn\'t work for me. CPanel just sits there and hangs on Starting CPanel ssl services. [/quote:17ee3410b1]

 

[Karl]

I mean when restarting CPanel after updating the cpanel.pem file. Not when trying to access the secure CPanel.

 

[indiboi]

I\'d successfully (at least it seemed like it) changed the cert info in the cpanel.pem but didn\'t lock the file, I wasn\'t sure it would work, so I didn\'t want to prevent cpanel updates from fixing it. Well, like I said, it did work, but now when I try to edit the information again or replace the default cpanel.pem with my edited version, it still says localhost. I\'m doing everything per the above instructions, repeating what I\'d done the other day, but this time the change doesn\'t effect the cert status.

Does anyone have any suggestions?

 

[rpmws]

I have over 10 Equifax / Geo Trust SSL certs running. They have 2 different CA trusts. The most important thing I found was I had to paste soem Equifax content into the Ca-bundle file to keep browsers from warning about untrusted CAs.

I have also seen the browser return to a blank page after WHM cert installation. Seems like IE was the cause ..SSL wasn\'t working for the domain so I restarted apache and it worked.

 

[indiboi]

finally found the way to restart cpanel, fixed the problem:

/etc/rc.d/init.d/cpanel3 restart

[Edited on 11/26/01 by indiboi]