SSL installed, but have issues

[vancocom]

I've been having trouble with two things, both of which I can't seem to find solutions for on the forum.

First, I successfully installed an SSL cert for the admin domain via the control panel, but when I try to use https snakeoil.com shows up. Do I need to place the certs into the file structure manually?

Also, in directadmin.com I changed SSL=0 to SSL=1, PLUS set the option to have private_html poing to public_html, but when I try to access https://www.mydomain.com:2222 it does into some sort of loop for a few seconds where it redirects itself to itself, then gives a timeout warning.

Any suggestions will be helpful.

Thank you.

 

[vancocom]

I need to clarify that I am attempting to install an SSL cert for the domain attached to the admin user (I'm not trying to replace the global certs).

The cacert in /usr/local/directadmin/data/users/admin/domains is correct, the one I got from GoDaddy. There are no .crt or .key certs in this directory or anywhere else other than the snakoil certs. When I try to access a page via https, I get the snakeoil cert, no matter what I've tried.

The mydomain.net.conf file in the same directory shows the correct path to the above cacert.

The SSLCertificateFile/KeyFile both point to the old snakeoil cert in /etc/httpd/conf/ssl.key/server.key and ssl.crt/server.crt - if I change these values and restart httpd, it fails to start.

The httpd.conf file for the admin user, under VirtualHost...:443 has the same info as the httpd.conf file above. Again, I tried changing the values, but it didn't work.

Perhaps I'm confused about what needs to be done. I thought you just had to use the SSL install tool in the control panel and restart apache.

If I try to reate the .crt and .key files manually from what I got from GoDaddy, as stated above the httpd service will not start. The apache logs show "wrong tag" and "nested asn1 error" messages when I tried to start it.

I have two files, a gd_intermediate.crt and a mydomain.net.crt. The gd_intermediate.crt matches the cacert on the server.

I know I'm missing something, but I've read dozens of threads trying to figure out what I'm doing wrong.

Please help...

 

[nobaloney]

You don't own mydomain.com so your example does nothing but mislead us.

Does the domain set up as the admin user use the main IP# of the server? If so, then it's the main shared domain.

I highly recommend setting up the domain on it's own IP#, and then reinstalling the certificate. That should work.

Jeff