Vesta Control Panel - Forum

Hi Folks
I purchased a $5 wildcard SSL (Black Friday special) and was struggling to make it work. Here is a quick guide:

What I have done thus far.
1. Logged in to mysever.org:8083
2. Clicked Web
3. Selected "edit" for myserver.org
4. Enabled SSL, Generate CSR
5. Entered in the details for CSR (used *.myserver.org)
6. Received "Certificate has been generated succesfully". Now I have a SSL CSR, SSL Certificate, SSL Key (YOU MUST COPY AND PASTE EACH OF THESE NOTEPAD or some such text editor)
7. Provided AlphaSSL with SSL CSR, they have now provided me SSL Certificate text and AlphaSSL Intermediate CA text.

Now, this is where it may get confusing.

When you select "back" on VestaCP it shows you the screen to enter details for CSR again. Ignore this and select "Web" again from main menu and go to "edit" for myserver.org and enable SSL. You now have 3 areas where I need to enter

SSL Certificate
SSL Key
SSL Certificate Authority / Intermediate

Enter the following for each area:
SSL Certificate = The Certificate in the email from AlphaSSL (or its reseller like Centrihost)
SSL Key = The certificate you copy and pasted into notepad in Step 6. above
SSL Certificate Authority / Intermediate = The SHA-256 AlphaSSL certificate from this website (https://www.alphassl.com/support/instal ... icate.html)

Once you entered in correctly, you should see:


SUBJECT: Domain Control Validated, CN
ALIASES: *.myserver.org,myserver.org
NOT_BEFORE: Nov 23 11:40:39 2017 GMT
NOT_AFTER: Nov 24 11:40:39 2018 GMT
SIGNATURE: sha256WithRSAEncryption
PUB_KEY: 4096 bit
ISSUER C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2

Wildcard for 5$ / month? Or year? Last would be really cheap.

Other way: Use let's encrypt for system ssl (http://forum.vestacp.com/viewtopic.php?f=19&t=13057), runs on all of our vestacp servers without any probs.

ScIT wrote:Wildcard for 5$ / month? Or year? Last would be really cheap.

Other way: Use let's encrypt for system ssl (http://forum.vestacp.com/viewtopic.php?f=19&t=13057), runs on all of our vestacp servers without any probs.

$5 a year. Thats why I bought it.

Lets Encrypt is great too. I just find it doesn't always auto-renew

These come from the SSL provider
1. Certificate
2. CA Intermediate root Certificate bundle

The Private Key was to be backed up by you when you generated the CSR, it does NOT come in from your SSL provider.