Author Topic: [solved] webserver certificate  (Read 2819 times)

Floaty

  • Zen Apprentice
  • *
  • Posts: 5
  • Karma: +1/-0
    • View Profile
[solved] webserver certificate
« on: July 20, 2010, 09:51:04 am »
Hi

I can't find the file to edit so that the webserver will use my GoDaddy certificate.
It's working fine on the the management web page and on the mail part, but the
webserver still uses it's own selfsigned certificate. How can I change that?

Ubuntu server 10.04 x64 and eBox 1.5 all packages.
« Last Edit: July 20, 2010, 09:50:41 pm by Floaty »

Kamilion

  • Zen Monk
  • **
  • Posts: 82
  • Karma: +2/-0
  • NASA System Administrator
    • View Profile
Re: webserver certificate
« Reply #1 on: July 20, 2010, 07:53:58 pm »
When you set up ebox-webserver and turn on SSL, it strongarms you into using the ebox CA to generate a certificate. After you've enabled SSL, you can't go back into the Certification Authority - Services Certificates and uncheck the Enable checkbox.

On a normal apache server:
/etc/apache2/sites-available/ holds the webserver configs.
/etc/apache2/ssl/ holds the webserver certs.

eBox with only the default virtual domain:
/etc/apache2/sites-available/default-ssl holds the SSL webserver config.
/etc/apache2/ssl/apache.pem holds the webserver cert.

So far I have not had eBox replace the cert on me (Core 1.5.7, CA 1.5.2, Webserver 1.5.3) but I also haven't reconfigured the module since then.

This might help though:
http://forum.ebox-platform.com/index.php?topic=2360.msg17011#msg17011
« Last Edit: July 20, 2010, 07:55:47 pm by Kamilion »
"Never feel stupid for asking questions, feel stupid for ignoring answers."
"You're arrogant for thinking you can, ignorant for thinking you cannot."
"Asking questions is important,
because that's when intuition gets converted into inspiration."

Floaty

  • Zen Apprentice
  • *
  • Posts: 5
  • Karma: +1/-0
    • View Profile
Re: webserver certificate
« Reply #2 on: July 20, 2010, 09:50:10 pm »
Thank you very much Kamilion
I checked the config file which was ok but I hadn't copied the pem file to the right location.
So when I did, it worked as I wanted it to.

Kamilion

  • Zen Monk
  • **
  • Posts: 82
  • Karma: +2/-0
  • NASA System Administrator
    • View Profile
Re: [solved] webserver certificate
« Reply #3 on: July 21, 2010, 02:35:53 am »
Sure thing, enjoy your eBox. :)
"Never feel stupid for asking questions, feel stupid for ignoring answers."
"You're arrogant for thinking you can, ignorant for thinking you cannot."
"Asking questions is important,
because that's when intuition gets converted into inspiration."