Page 1 of 1

Using the API with custom SSL certificate

Posted: Fri Apr 06, 2018 2:35 pm
by AniiXx
Hello VestaCP Community,
I've got a system with VestaCP on Ubuntu 16.04 set up. The system itself works fine though since I updated the SSL certificate to a custom Let's Encrypt generated certificate, the API no longer works as expected. It always returns the values and does it's job, but the scrips of the administration panel end up with an ERR_EMPTY_RESPONSE (the server resets the connection before the "Location" header can be reached within the script).

To see if the error was caused by the PHP scripts I've set up, I hit the exact same scripts against the VestaCP demo. That was working fine, so I can confirm that it is not the PHP scripts but rather the way Vesta is configured. Now, since I didn't change anything in regards to Vesta except for the SSL cert, I find that this may be the issue. Anybody has an idea why that is? I now restored to self-signed certificates and it still doesn't seem to work (though it might be worth mentioning that those are not the original ones generated by Vesta).

Also, it might be worth mentioning that I have two other VestaCP hosts running, which are pure vanilla VestaCP and those seem to be working fine with the scripts as well.

Cheers,
Marcel M.

Re: Using the API with custom SSL certificate

Posted: Sat Apr 07, 2018 6:39 pm
by hdavis84
You always want to keep the original files if you aren't absolutely certain what you're doing will work flawlessly. Renaming them as the following examples is a good practice.

filename.key -> old-filename.key
filename.key -> filename.key.bkp

There are a number of posts on websites about how you can use a letsencrypt cert for the control panel with least/no issues. I recommend the post at the link below.

Before trying to set up letsencrypt SSL, though, make sure you've set up the CNAMEs for the domain you use with vestacp, such as www, mail, and ftp.

https://blog.flaunt7.com/how-to-use-let ... gin-panel/