DirectADmin's SSL

[nobaloney]

Is your domain name the same as your hostname? That won't work for DirectAdmin. Not just for SSL, but for all of DirectAdmin. Please post the domain name, the hostname, and the complete URLs you want protected by the Certificate; then one of us may be able to help you do what you want.

Jeff

 

[MtK]

Is your domain name the same as your hostname? That won't work for DirectAdmin. Not just for SSL, but for all of DirectAdmin. Please post the domain name, the hostname, and the complete URLs you want protected by the Certificate; then one of us may be able to help you do what you want.

Jeff

since this has become a very long thread, I'll give you the short version:
I have a certificate activated and working for DA (access to the panel through port 2222) - http://server3.lighthost.co.il:2222
while inside the panel and you click on phpMyAdmin, you are redirected to http://server3.lighthost.co.il/phpmyadmin which is outside the range of DA's secure pages.

that's what I want to fix...

 

[nicsopon]

I think all steps you done are correct.

The wrong thing is the Certificate Key is incorrect.

Ask your SSL's Sellers to send you all Certificate Keys. There are about 4 files.

Try the one that is not "ROOT" certificate.

Normally, SSL Provider will sent you only one key and that one is ROOT. It will not with RapidSSL of any cheap SSL License.

It will work with only WildCard or high price SSL.

 

[MtK]

I think all steps you done are correct.

The wrong thing is the Certificate Key is incorrect.

Ask your SSL's Sellers to send you all Certificate Keys. There are about 4 files.

Try the one that is not "ROOT" certificate.

Normally, SSL Provider will sent you only one key and that one is ROOT. It will not with RapidSSL of any cheap SSL License.

It will work with only WildCard or high price SSL.

not sure I understand why I need a different key, if in both cases it's the same domain (no wildcard needed)...

 

[nobaloney]

I'm going to ignore nicsopon's post because I think he's incorrect.

I'm going to agree with you that when you type the following into your browser:

http://server3.lighthost.co.il:2222

You do get a redirection to

https://server3.lighthost.co.il:2222

But I disagree that when from a secure login, once in the DirectAdmin control panel, you click on phpMyAdmin, you are redirected to

http://server3.lighthost.co.il/phpmyadmin

I believe you get directed to:

https://server3.lighthost.co.il/phpmyadmin

Because a secure login generally leads to a secure login.

So I typed the following into my browser:

https://server3.lighthost.co.il/phpmyadmin

and I got a warning of a self-signed Certificate, which means that though you think you've installed the Certificate properly, you haven't.
What you need to do is find the default apache configuration. On machines running apache 1.x it should be in /etc/httpd/conf/httpd.conf. On machines running apache 2.x it should be in /etc/httpd/conf/extra/httpd-ssl.conf.

In both cases you're looking for these lines:

SSLCertificateFile
and
SSLCertificateKeyFile

Both of these need to point to the files where you installed the proper file for your DirectAdmin Certificate. Then restart apache.

If you can't follow this, or if it doesn't work for you, then for some reason your system isn't set up as the default. In that case, then you can hire someone to figure it out for you.

Note that for years we've been selling Secure Certificates with Multiple installs for less than most companies charge for Certificates you need to install yourself.



Jeff

 

[MtK]

thanks that did the job perfectly.


btw, what are these settings for (in directadmin.conf):

apachecert=/etc/httpd/conf/ssl.crt/server.crt
apachekey=/etc/httpd/conf/ssl.key/server.key

the shared certificate?

 

[scsi]

So just use a .htaccess inside of the phpmyadmin folder to redirect to ssl.

 

[MtK]

What you need to do is find the default apache configuration. On machines running apache 1.x it should be in /etc/httpd/conf/httpd.conf. On machines running apache 2.x it should be in /etc/httpd/conf/extra/httpd-ssl.conf.

In both cases you're looking for these lines:

SSLCertificateFile
and
SSLCertificateKeyFile

Both of these need to point to the files where you installed the proper file for your DirectAdmin Certificate. Then restart apache.

sorry to pup this issue up again, but although it work a few days ago, now I'm back to the same state.
https://servers.lighthost.co.il/phpmyadmin is not using the Certificate although set to do so in the httpd-ssl.conf

 

[nobaloney]

You don't write whether or not you followed my advice, so I don't have enough information to tell you, except that if you did, you should see if the files were updated since, and if so, by whom or what.

Jeff

 

[MtK]

You don't write whether or not you followed my advice, so I don't have enough information to tell you, except that if you did, you should see if the files were updated since, and if so, by whom or what.

Jeff

I already stated that I followed your suggestion:

thanks that did the job perfectly.

but nobody changed the files, and they seem unchanged whatsoever...

 

[nobaloney]

If those files are unchanged but your server isn't looking at those files anymore, then the main configuration files may have changed or been changed.

Otherwise I don't know how to help you without logging into your server; we charge for that.

Perhaps someone else will respond.

Jeff