How to properly install SSL ?

[pandabb]

Here's what i did after i purchase a key.

1. Enabled SSL by editing webdomain in vesta cp.
2. Does it matter if i use public_html or public_shtml ? Since it's a new domain i just used public_shtml
3. I entered in the keys then accept, it went ok or no errors found.
4. Checked my site but i don't see the lock icon or green https://
5. Googled search for SSL Checker, i entered my domain and it shows Grade "A" and all green or OK.

Are there any steps i've missed? By the way i've added the SSL key to my main domain which use the same ip to access vesta cp, i also like to ask how can i make vesta cp ssl approved ? Because everytime i visit https://my-ip:8083 it shows invalid certificate or error.

Thank you

[augustine_10]

For SSL try using public_html, and use https://www.sslshopper.com/ssl-checker.html to verify if its working fine.


To use SSL with VestaCP, replace the below file with your SSL private key and certificate.
---
/usr/local/vesta/ssl/certificate.key
/usr/local/vesta/ssl/certificate.crt
----

[pandabb]

Thanks i was able to make it work the missing puzzle was cloudflare i had to enable SSL or else it will not work.


Then for the ip address when i access my vestacp it doesn't work it says "server certificate does not match the url".

Is it possible to use the same cert that i've used for my domain to this ip (vesta cp) ? As instructed i have copied my key to vesta/ssl. Or can i configure vesta to be accessible via my domain eg. https://mydomain.com:8083 or configure both ip and domain to make it work w/ ssl even i only have one ssl certificate issued to one domain.

Thanks!

[augustine_10]

You can either purchase an SSL for IP(Which nobody does) or replace the SSL files of vesta with your domain certificate and access it via https://myadomain.com:8083

[pandabb]

Thank you again sir for your reply, how do i make vesta cp accessible via my domain with SSL? I've already tried replacing the keys but when i access the site using the domain it gives me an "this webpage is not available" however for others i.e phpymadin im able to access it using the domain now.

[augustine_10]

That's strange,

Are you able to access the VestaCP using https://ip:8083?.

[pandabb]

Yes that's how i access it - https://xxx.xx.xxx.xxx:8083

Also note when i installed vesta cp i have delete the defaul.domain web, i'm not sure if it has something to do with it.

[augustine_10]

Not sure, why you are getting this error,

any way make sure yourdomain.com resolving to the vestaCP IP, if its resolving to the server IP then you will be able to access it via https://yourdomain.com:8083 (and also try restarting VestaCP after you change the SSL crt and key file)

Hope this helps.

[pandabb]

Thanks i found what's causing the error, its my dns again from cloudflare.

It now works but cloudflare is disabled, is there a workaround with this ? Below are the following dns records i have @ cloudflare.

A points to my ip
www points to my domain
mx
mx

Also i checked vesta cp version it has someting "CloudFlare IP pool support for Nginx" how do i access this ? I think this is the one i need to fix so it will output the real ip.