SSL compatibilité

  • Hello


    I'm running on 1.1.0-rc1.4 on Ubuntu Server 12.04
    I didn't use any SSL options at setup.
    Now I have to install some SSL certificates.
    I have only one IP dedicated to my server and don't plan to add more if I can avoid it.
    At this time, I only have one domain who need really to be SSL'ed but... if I start to configure it, I guess it's a good idea to add also a certificate for the panel and why not for the mail server.


    So right now, I'll need to have
    panel.domain1.com
    mail.domain1.com
    http://www.domain2.com and domain2.com


    As I don't need any financial warranty for this certs I can't pay too much. But I don't want most of the users got a popup telling the certificate is a self-issued.
    So, I choose Gandi as provider (http://gandi.net) but I'm wondering if I have to choose three standard certificates at 12€ each ( https://www.gandi.net/ssl/standard#single ) or one multi-domain one at 40 euros for three addresses ( https://www.gandi.net/ssl/standard#multi )
    [Edit : just seen Godaddy proposes SSL certs for less than 4€. Just hoping it will be compatible]
    I don't one which one is the most compatible with i-mscp.
    And by the way, I'm still looking for information to add ssl functionnalities after the setup.


    Kind regards
    cEd

    Edited once, last by VirtualCed ().

  • Well, I just bought a SSL from GoDaddy but not able to install it :(


    I have the .key file when I generated the csr to create the request.
    I have the cert file received from GoDaddy
    I have two intermediate certificates from Godaddy
    That's I believe the source of the issue...
    I-MSCP strips one of them as it looks like that


    ------ REMOVED CERTS --------


    So I'm stuck with my certificate and no idea how to install it.


    The status is i-mscp panel is

    Code
    1. Erreur: Modules::openssl::ssl_check_cert: Certificate /tmp/sC3DUJESn1 is not valid. Exiting...


    And when trying to reach the https site the following error


    ssl_error_rx_record_too_long


    Please help me...

    Edited once, last by xorg ().


  • Where you want to use ssl? do you have a wildcard cert or only for one Domain?


    I want in a first time use if for one domain (vue-360.com)
    So, in the panel, I go to domains management, view certificates and then put the .key content in the first field, the vue-360.cert content in the second field and the content of the intermediate bundle in the third field.


    The bundle is called "Go Daddy Certificate Bundles (for cPanel, Plesk, Apache 1.x and 2.x installation only) " and it's available at https://certs.godaddy.com/anonymous/repository.pki
    It's the same I got when downloading my certificate. (and it's the same content I put in my previous message)


    Thanks for the help


  • Hello ;


    You bought your certificate here from where exactly?


    If yes, I'll bought one and try today and fix i-MSCP if needed.


    Thank you for usin i-MSCP.

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

    Edited once, last by Nuxwin ().


  • Hello
    As it's difficult to find the promo to have the cert so cheaper, I create a bit.ly shortcut
    Godaddy Promo
    But I can also grant you access to my server, even if I don't know you personnaly, I'm following your posts since several years now


    cEd

  • you know, that this Cert is only for one domain?? You can't setup Subdomains. Sooooo panel.bla.bla and an other is not possible ;)


    You can try StartSSL. this certs are free

    Edited once, last by xorg ().


  • you know, that this Cert is only for one domain?? You can't setup Subdomains. Sooooo panel.bla.bla and an other is not possible ;)


    I know it's for only one domain.
    I'm planning to buy a new one for
    panel.domain.com
    domain.com
    mail.domain.com


    i-mscp allows to put different certificates on the same ip with SNI, right ?


    The problem with startssl, is they are not compatible with the infra at my job (a bank) and it crashes.
    Godaddy certs doesn't have the problem.


  • Yes, i-mscp works with only on Domain.


    How do you add the Cert??


    I go to the admin page of the panel, choose the "activate SSL"
    Then go on the domain account, go to domain, show certificate
    Filled the password, the key, the CERT and the intermediate.


    gOOvER, you are also someone I trust and can give access to my panel if needed.