Page 2 of 2
Re: Установка сертификата SSL
Posted: Tue Jan 28, 2014 7:43 pm
by jhewit
misak35 wrote:I did that. Same problem :D nothing happen.
Maybe i need domain.key and domain.csr put somewhere else, because now i generate it on root.
It really shouldn't matter where you generate it on the server.
So you regenerated your certificate on StartSSL using the text
contained within domain.csr, and filled the boxes as described
and it still did not work?
If you did reissue the cert with the new csr, then i'm at a loss
on this one. As I do not use StartSSL, I was trying to attack
this as best I could to help you out.
Re: Установка сертификата SSL
Posted: Tue Jan 28, 2014 8:22 pm
by misak35
Yes. Thank You :D
Is there any other cheap ssl certificate? Or free??
Re: Установка сертификата SSL
Posted: Tue Jan 28, 2014 9:11 pm
by jhewit
misak35 wrote:Yes. Thank You :D
Is there any other cheap ssl certificate? Or free??
A cheap but decently regarded SSL certificate would be namecheap I think there is $9 per year. I use godaddy it's cheaper then some but $69 per year and we'll known and respected. Namecheap used to be a reseller for commodo not sure if they still are but that's how they used to be able to make prices so low.
Re: Установка сертификата SSL
Posted: Tue Feb 04, 2014 3:31 am
by hexwiz
jhewit wrote:misak35 wrote:Well, this guide said that ISPCONFIG generete file.. Where VestaCP generete that CSR file?
In the next form we need to paste the CSR generated by ISPConfig at one of the first steps (the one called “SSL Request” on the ISpconfig Web Domain SSL panel).
Just copy and paste it paying attention in order to NOT copy any other digit or blank spaces outside the two delimiters:
-----BEGIN CERTIFICATE REQUEST-----
and
-----END CERTIFICATE REQUEST-----
As of now there is not a built-in CSR generator for VestaCP you have to manually do it, as can be seen in the below referenced topic it has been added as feature request. To manually generate your Private key and CSR file use this code from SSH command prompt.
Code: Select all
openssl req -nodes -newkey rsa:2048 -keyout domain.key -out domain.csr
The domain.key file is the SSL Key (2nd box) when setting up the SSL certificate on your server. The domain.csr is what you need to place in StartSSL when generating your certificate. Once you use the CSR and generate your certificate, you then place the text in that file in the SSL Certificate (1st box). The contents of CA.pem will be placed in the SSL Certificate Authority / Intermediate (3rd box).
Hope this helps.
if after you input the contents of the CA.pem into the SSL Certificate Authority / Intermediate (3rd box) it still gives an error, paste the contents of the sub.class1.server.ca.pem right after the CA.pem entry.
** ca.pem & sub.class1.server.ca.pem can be downloaded from the links at the bottom on the last/finish page when you complete the startssl certificate wizard.
Re: SSL Certificate installation
Posted: Sun Mar 16, 2014 12:59 pm
by sirpros
Every thing worked fine and got the cert installed but when I visit
https://domain.com/ I get a 500 Internal Server Error.
What did I miss ?
Re: SSL Certificate installation
Posted: Sun Mar 16, 2014 1:09 pm
by sirpros
sirpros wrote:Every thing worked fine and got the cert installed but when I visit
https://domain.com/ I get a 500 Internal Server Error.
What did I miss ?
I get it now, I had to explicitly type in
https://domain.com/index.html and the error was gone.
RESOLVED
Re: SSL Certificate installation
Posted: Tue Dec 01, 2020 2:16 am
by haileynanette
Yes, it solved my problem....
Re: SSL Certificate installation
Posted: Sun Dec 06, 2020 7:04 am
by natbot400
Once you use the CSR and generate your certificate, you then place the text in that file in the SSL Certificate
3D Modelling Software