Another SSL certificate/https problem

J

janton

Verified User
Joined
Sep 17, 2009
Messages
145
Hey ALL,

I have read many forums and "how to's" about how to implement the ssl in certificate in directadmin. It seems very easy, also if you follow these http://www.site-helper.com/ssl.html , you think it can't go wrong! Well it can, because i have tried everything in the book to let it work.

1.) I think my main problem is i want to install ssl on my main domain name, so root domain. I can not find any information about this.

so i tried
2.) User level>myfreaking.com>SSL Certificates>Create A Certificate Request, and so i got a window with a new RSA PRIVATE KEY and a CERTIFICATE.
Nice now finally this certificate worked in namecheap where i needed to copy past the certificate.. (THIS IS WRONG DON"T DO THIS, i'm just telling my storry) so i did, without thinking that the new RSA was totally different and ofcourse would not work...

3.) So now i tried to copy past the new RSA and CERTIFICATE, but it won't work.. Cannot Execute Your Request Details: Unable to find certificate


now what can i do, what did i do wrong? How should a root certificate be installed with ssl? First i tried the Certificate that was already pressent but namecheap did not understand that.. the new generated version he did. But now i got this new RSA code! I guess i have lost my money with the ssl i now have, i hope i can get a nother one with perhaps the old rsa only not sure how to generate any good Certificate with that.
 
For the root certificate there is a link towards the bottom that says "Click Here to paste a CA Root Certificate" The "Click Here" part is a link, it would be nice if the like was a different color as the standard text, so it would stand out, but that is where you install the root cert.

As for the other parts, I have never had a problem installing certificates in DA.

Not sure what you mean exactly about getting a new RSA that is different? Did you overwrite the RSA key that was already in that key/certificate window? That was probably your mistake, it says on the site-helper page "Paste the certificate immediately below it and click "Save."" Where the "it" refers to the pre-filled private key. If you overwrote that, and don't have a backup, then your new certificate is toast, the key and the certificate have to match. And if it is a chained certificate then that root certificate is needed too.
 
Ok but problem is i now have already a certificate for a RSA key that directadmin created, (without warning me that this was the main domain) is it possible i create a certificate out of this new key and where can i place this new keys? Where can i overwrite the old ones...? (CentOS 5.5)
 
I think the main problem is... i created a certificate request with a different RSA -->Create A Certificate Request

perhaps i can contact the SSL suplier if i perhaps can get a new one... i will do this tomorrow morning, my girlfriend is a bit angry i'm not going to bed :) perhaps i should go hehe
 
So:
If an Admin wishes to add an SSL certificate on the main server's domain, they must do it manually.
This is no longer needed, so i only have to? > Click Here to paste a CA Root Certificate

but how do i get my certificate.request
 
I found the problem, no we need a solution!

Ok so i think i found out what the problem is, i have a server with only my site and some others for friends on it. i got 2 ip's but my main site (that i would like to have the SSL certificate on) is on the servers ip adres, also all other sites are on this ip adres.

Now i started reading: http://help.directadmin.com/item.php?id=346
How do I add an additional IP to a domain using the multi-IP system?


But this way i need to change my ip for my maindomain, i think this is not good?
Also, why should i have to create a new user for this? Because i'm the only one using this directadmin, i don't want to have different user logins...

Is there a way i could get a free ip to my main domein name? or better, could i have this ip adres from the server, and put the other sites on the free ip.. (would that fix it because it's the server ip) because i have some api's programs running on this domain name with special Access from that ip, else i need to change everything.:eek:
 
Also if i'm admin i can not add a ip to a domein?

i read this in the tutorial:
From here, the User must then assign it to their domain. To do this, login as the User and go to:
User Level -> Domain Setup -> domain.com
at the bottom of the page, you'll see "Add another IP to domain.com". Select your new IP, and click "Add IP".
If needed, remove the other IP from the domain's IP list.




I can't see it? So i first need to create a Reseller user than a New User and then i can do this? pfff.. i think i go back to webmin and virtualmin, that does what you need.. this is more all work around for me!
 
scsi said:
Maybe you just dont know how to use directadmin properly?

Its really not that difficult.

www.site-helper.com
Click to expand...

Yep thx for the link, i already got that one, but any help is always fine!
Yeah.. it's just that i try to get the SSL working the past 2 days and that is why i get frustrated... i don't understand why i need to generate all that users if .. i'm the only user, i expect to be able to do everything as i'm the admin!
 
I don't know what i have to do now, because i got 2 ip's:
1 ip with the server and all domains
1 ip free only use it for nameserver right now

So i understand i need a free ip, i have one, BUT now i need to transfer the main domain name to that free domain name > is that even ok? Or can i transfer all other domains to that free ip so i can run SSL on the server ip adres? (will it work then)

Both would be a lott of work i think, also i have some API's and programs working only with the main ip adres, so my main site has a ip i would like to stay that way...
 
There are 3 levels.

1. admin level
2. reseller level
3. user level

You can switch between admin, reseller and user level. You cant do everything in just the admin level you need to switch to the reseller or user level to do different things.

If you want to assign an ip to a user so that you can use ssl you have to do this.

1. Login as an admin in admin level.
2. Go to ip management and assign the ip address to the reseller that the user is under
3. Go to show all users and find the user and click "modify user"
4. You can change the ip address here of the user
5. Go to show all users and find the user and click "login as user"
6. When logged in as user you should now be able to go to the ssl section and setup the ssl
 
Last edited:
thx for your help, untill now i did everything from my admin LOGIN.. i mean everything was accessible with this login, also reseller and user level.

I know how to accomplish this, only problem is i already got those domains up and running for a year or so, so i have to find out how to change ip from the other domains without needed to delete and totally rebuild everything, such as email accounts ftp logins etc etc. I guess i can do this by only changing everything in the DNS for every site, perhaps 10 sites... but not sure.
 
I'd love to help, but I'm lost.

You can only have on certificate on any one IP/port combination.

Have you met this requirement?

Jeff
 
You must log in or register to reply here.
Back
Top