SSL Certificate installation

[jhewit]

I did that. Same problem :D nothing happen.

Maybe i need domain.key and domain.csr put somewhere else, because now i generate it on root.

It really shouldn't matter where you generate it on the server.
So you regenerated your certificate on StartSSL using the text
contained within domain.csr, and filled the boxes as described
and it still did not work?

If you did reissue the cert with the new csr, then i'm at a loss
on this one. As I do not use StartSSL, I was trying to attack
this as best I could to help you out.

[misak35]

Yes. Thank You :D

Is there any other cheap ssl certificate? Or free??

[jhewit]

Yes. Thank You :D

Is there any other cheap ssl certificate? Or free??

A cheap but decently regarded SSL certificate would be namecheap I think there is $9 per year. I use godaddy it's cheaper then some but $69 per year and we'll known and respected. Namecheap used to be a reseller for commodo not sure if they still are but that's how they used to be able to make prices so low.

[hexwiz]

Well, this guide said that ISPCONFIG generete file.. Where VestaCP generete that CSR file?

In the next form we need to paste the CSR generated by ISPConfig at one of the first steps (the one called “SSL Request” on the ISpconfig Web Domain SSL panel).
Just copy and paste it paying attention in order to NOT copy any other digit or blank spaces outside the two delimiters:

-----BEGIN CERTIFICATE REQUEST-----
and

-----END CERTIFICATE REQUEST-----

As of now there is not a built-in CSR generator for VestaCP you have to manually do it, as can be seen in the below referenced topic it has been added as feature request. To manually generate your Private key and CSR file use this code from SSH command prompt.

Code: Select all

openssl req -nodes -newkey rsa:2048 -keyout domain.key -out domain.csr

viewtopic.php?f=11&t=4020

The domain.key file is the SSL Key (2nd box) when setting up the SSL certificate on your server. The domain.csr is what you need to place in StartSSL when generating your certificate. Once you use the CSR and generate your certificate, you then place the text in that file in the SSL Certificate (1st box). The contents of CA.pem will be placed in the SSL Certificate Authority / Intermediate (3rd box).

Hope this helps.

if after you input the contents of the CA.pem into the SSL Certificate Authority / Intermediate (3rd box) it still gives an error, paste the contents of the sub.class1.server.ca.pem right after the CA.pem entry.

** ca.pem & sub.class1.server.ca.pem can be downloaded from the links at the bottom on the last/finish page when you complete the startssl certificate wizard.

[sirpros]

Every thing worked fine and got the cert installed but when I visit https://domain.com/ I get a 500 Internal Server Error.
What did I miss ?

[sirpros]

Every thing worked fine and got the cert installed but when I visit https://domain.com/ I get a 500 Internal Server Error.
What did I miss ?

I get it now, I had to explicitly type in https://domain.com/index.html and the error was gone.
RESOLVED

[haileynanette]

Yes, it solved my problem....

[natbot400]

Once you use the CSR and generate your certificate, you then place the text in that file in the SSL Certificate 3D Modelling Software