Problem with SSL removal and adding a new SSL Cert

SupermanInNY

Verified User
Joined
Sep 28, 2004
Messages
428
I have a user who wants to have a 'clean slate' for his SSL certificate.
He had a certificate running fine for a year.
He then messed things up by trying to install the certificate (renewal) on his own and it failed.

Now he wants me to install a new certificate for him.

I tried to clean up his actions (very carefully):

1. I created a directory called: /usr/local/directadmin/data/users/username/domains/old

2. I moved:
somedomainname.com.cacert
somedomainname.com.cert
somedomainname.com.key
to the old/ directory

3. I entered the
Modify Domain (domain administration):
Modify somedomainname.com
Secure SSL (Ignored if not allowed)
UnChecked the Secure SSL (Ignored if not allowed) and then restarted Apache.

So far, it went well.

I then proceeded to start a 'clean slate' install of a new certificate.

But, I did it in several steps.
I enabled (Checked) the the Secure SSL (Ignored if not allowed) and restarted Apache.

It failed!

# service httpd restart
Stopping httpd: [ OK ]
Starting httpd: Syntax error on line 51 of /usr/local/directadmin/data/users/username/httpd.conf:
SSLCertificateFile: file '/usr/local/directadmin/data/users/username/domains/somedomainname.com.cert' does not exist or is empty

Why did it populate the httpd.conf with the 'old values' of the SSL?
Where does it store the knowledge that I had a certificate installed once?

In this particular instance, I don't want it to 'remember' that there was a previous SSL installed. I want to have a clean slate.

Please advise on where to look for the 'memory' effect.

thanks,

-Alon.
 
[RESOLVED]

From John of DA:

Login to DA as user soragit.
Go to the SSL Management.

For a "Clean Slate" set him to use the shared server certificate (top option).

If you move the cert/key files out of the way and don't change what files apache is using, then the apache restart will fail.


--
that resolved the problem.
I then proceeded to Delete the values that were still populating the big text box of the key and cert of the old values and indeed clean slate :)

thanks Jeff :).

-Alon.
 
Back
Top