Directadmin SSL Cerfitcate

psycho

Verified User
Joined
May 16, 2005
Messages
43
Hey,



I'm trying to install a godaddy ssl certificate for the directadmin, so the data between the client and directadmin(the panel) would be over ssl and encrypted..

I have tried to put the generated key file(that iv'e got after I created a csr) in /usr/local/directadmin, named as /usr/local/directadmin/conf/cakey.pem

Also, I took the issued crt file that Godaddy supply and put it at /usr/local/directadmin/conf/cacert.pem

Plus, I set SSL = 1 in directadmin.conf

After restarting, directadmin wouldn't start with error:
2009:08:03-19:03:01: error loading certificate key

2009:08:03-19:03:11: error loading certificate key

2009:08:03-19:04:01: error loading certificate key

2009:08:03-19:04:12: error loading certificate key

2009:08:03-19:05:02: error loading certificate key

2009:08:03-19:05:12: error loading certificate key

2009:08:03-19:05:14: error loading certificate key



I can't understand what I'm doing wrong, do you have any idea? Or any information related so I can find a solution?

Thanks in advanced.

Guy.
 
I followed this guide, and still having a problem loading it.

any idea's which errors might occured? the error log of directadmin doesn't give too much information :/
 
How did you copy the certificate files to the server? If you used ftp you must upload them as binary.

Jeff
 
Here is how we install ssl on da with centos, also makes it easy for users to share ssl:

//Install SSL
//Make key
cd /etc/httpd/conf/ssl.key/
//create CSR
openssl genrsa -out server.key 1024
openssl req -new -key server.key -out server.csr
//self signed copy crt to correct folder#
openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 1825
//Copy CSR
nano server.csr
//Add CRT
nano -w /etc/httpd/conf/ssl.crt/server.crt
//Check for port 443

//DirectAdmin on SLL
nano -w /usr/local/directadmin/conf/directadmin.conf
//Change ds ssl to 1
//Change ssl location to:
//
cacert=/etc/httpd/conf/ssl.crt/server.crt
cakey=/etc/httpd/conf/ssl.key/server.key
//
 
Just a little note because I came here through searching for the "error loading certificate key" error, in my case I just had the wrong certificate in cacert.pem, even though the error is about not able to load the key which may keeps you focused on the key file.
 
Back
Top