SSL not working on a hosted domain

some1

New member
Joined
Jun 1, 2007
Messages
4
I have some problems with a real certificate on a website I host on my server.

Under admin I have made a website (user level) and installed a real certificate. That all works fine.

A user made under a reseller also want to have a real certificate. I have given him a free IP adres, so the SSL function is enabled for him. He requested a real certificate and pasted the information under the SSL section, and SSL is enabled for that site.

When some try to reach the website, i says that the certificate is not for the website you request, but for my main site (made under admin)

I have looked in some text files, and found the following:

In the httpd.conf file under /usr/local/directadmin/data/users/username/httpd.conf there is still the default SSL information:

Code:
	SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
	SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key

In the file /usr/local/directadmin/data/users/username/domain/domainname.tld.conf it added:

Code:
	SSLCertificateFile /usr/local/directadmin/data/users/username/domains/domainname.tld.cert
	SSLCertificateKeyFile /usr/local/directadmin/data/users/username/domains/domainname.tld.key

I have replaced the items in the httpd.conf file for that user with the lines above, and restarted the httpd, that didn't help much, still the same error on the certificate. Than I have removed the lines in the domainname.tld.conf and restarted httpd but still no luck.

Any suggestions what to do the fix this problem?
 
First make sure you've got copies of all the Certificate files, including the private key.

Second turn off SSL on the domain, then turn it back on again.

Then post both the key and the cert (the key first, then immediately under it the cert) and make sure you've clicked to install a new cert and save.

Then wait about a minute and see if it works.

Jeff
 
I tryed that, but that also didn't work. I have also restarted the server, but that also didn't work.
 
Specifically what do you get as an error?

If you've followed the instructions exactly and the files are correct, then something inside your configuration files is incorrect.

Jeff
 
tnx, for your answers, but i have got i working now.

The user has different domains under that account. I have assigned an ip address to him, and there for he was able to create a certificate.

I have removed his domain name from his user account, created an other account for that domain, and added his domain name. Then I copied his certificate to the new domain (firts exported before deleting his domain) and everyting worked.
 
tnx, for your answers, but i have got i working now.

The user has different domains under that account. I have assigned an ip address to him, and there for he was able to create a certificate.

I have removed his domain name from his user account, created an other account for that domain, and added his domain name. Then I copied his certificate to the new domain (firts exported before deleting his domain) and everyting worked.

Something screwy is going on with directadmin ssl.
One of my customers installed a certificate he got from rapid ssl. He's had his own IP from the beginning. The UI in direct admin told him that everything worked fine and to wait a few minutes.

<a href="http://img212.imageshack.us/my.php?image=certinstallsuccessso7.gif" target="_blank"><img src="http://img212.imageshack.us/img212/1435/certinstallsuccessso7.th.gif" border="0"/></a>

Nothing every happens but hut when I navigate to his secure pages, i'm told the certificate was issued by his own domain!
Any help would be appreciated.
 
Often it's just a matter of your browser cache needs to be refreshed. You didn't tell us the domain name so there's no way for us to look at it for you.

If it's not a browser cache issue you can reinstall the cert in your DirectAdmin control panel; you'll need to paste both the Private Key and the Certificate, into the control panel and then save it again.

If it still isn't working then you should check to make sure that the directadmin_cron is installed in /etc/cron.d, and that the following line is included (probably the top line):
Code:
* * * * * root /usr/local/directadmin/dataskq
and also make sure that your cron daemon is running.

Jeff
 
Often it's just a matter of your browser cache needs to be refreshed. You didn't tell us the domain name so there's no way for us to look at it for you.

If it's not a browser cache issue you can reinstall the cert in your DirectAdmin control panel; you'll need to paste both the Private Key and the Certificate, into the control panel and then save it again.

If it still isn't working then you should check to make sure that the directadmin_cron is installed in /etc/cron.d, and that the following line is included (probably the top line):
Code:
* * * * * root /usr/local/directadmin/dataskq
and also make sure that your cron daemon is running.

Jeff

I got it to work. I mistakenly installed a CA cert when I didn't have to.

I got confused at step 4 on the ssl installation instruction here:

http://www.site-helper.com/ssl.html

It should probably be edited to say "Do not do Step 4 unless your SSL provider provides an additional cert called a CA Cert."

Thanks nontheless. :)
 
Back
Top