Page 1 of 1
How to properly install SSL ?
Posted: Tue Aug 18, 2015 6:18 pm
by pandabb
Here's what i did after i purchase a key.
1. Enabled SSL by editing webdomain in vesta cp.
2. Does it matter if i use public_html or public_shtml ? Since it's a new domain i just used public_shtml
3. I entered in the keys then accept, it went ok or no errors found.
4. Checked my site but i don't see the lock icon or green https://
5. Googled search for SSL Checker, i entered my domain and it shows Grade "A" and all green or OK.
Are there any steps i've missed? By the way i've added the SSL key to my main domain which use the same ip to access vesta cp, i also like to ask how can i make vesta cp ssl approved ? Because everytime i visit
https://my-ip:8083 it shows invalid certificate or error.
Thank you
Re: How to properly install SSL ?
Posted: Tue Aug 18, 2015 8:37 pm
by augustine_10
For SSL try using public_html, and use
https://www.sslshopper.com/ssl-checker.html to verify if its working fine.
To use SSL with VestaCP, replace the below file with your SSL private key and certificate.
---
/usr/local/vesta/ssl/certificate.key
/usr/local/vesta/ssl/certificate.crt
----
Re: How to properly install SSL ?
Posted: Wed Aug 19, 2015 3:15 am
by pandabb
Thanks i was able to make it work the missing puzzle was cloudflare i had to enable SSL or else it will not work.
Then for the ip address when i access my vestacp it doesn't work it says "server certificate does not match the url".
Is it possible to use the same cert that i've used for my domain to this ip (vesta cp) ? As instructed i have copied my key to vesta/ssl. Or can i configure vesta to be accessible via my domain eg.
https://mydomain.com:8083 or configure both ip and domain to make it work w/ ssl even i only have one ssl certificate issued to one domain.
Thanks!
Re: How to properly install SSL ?
Posted: Wed Aug 19, 2015 7:55 am
by augustine_10
You can either purchase an SSL for IP(Which nobody does) or replace the SSL files of vesta with your domain certificate and access it via
https://myadomain.com:8083
Re: How to properly install SSL ?
Posted: Wed Aug 19, 2015 10:51 am
by pandabb
Thank you again sir for your reply, how do i make vesta cp accessible via my domain with SSL? I've already tried replacing the keys but when i access the site using the domain it gives me an "this webpage is not available" however for others i.e phpymadin im able to access it using the domain now.
Re: How to properly install SSL ?
Posted: Wed Aug 19, 2015 10:57 am
by augustine_10
That's strange,
Are you able to access the VestaCP using
https://ip:8083?.
Re: How to properly install SSL ?
Posted: Wed Aug 19, 2015 11:54 am
by pandabb
Yes that's how i access it -
https://xxx.xx.xxx.xxx:8083
Also note when i installed vesta cp i have delete the defaul.domain web, i'm not sure if it has something to do with it.
Re: How to properly install SSL ?
Posted: Wed Aug 19, 2015 12:02 pm
by augustine_10
Not sure, why you are getting this error,
any way make sure yourdomain.com resolving to the vestaCP IP, if its resolving to the server IP then you will be able to access it via
https://yourdomain.com:8083 (and also try restarting VestaCP after you change the SSL crt and key file)
Hope this helps.
Re: How to properly install SSL ?
Posted: Wed Aug 19, 2015 12:15 pm
by pandabb
Thanks i found what's causing the error, its my dns again from cloudflare.
It now works but cloudflare is disabled, is there a workaround with this ? Below are the following dns records i have @ cloudflare.
A points to my ip
www points to my domain
mx
mx
Also i checked vesta cp version it has someting "CloudFlare IP pool support for Nginx" how do i access this ? I think this is the one i need to fix so it will output the real ip.