SSL Certificate

Generic questions on MailCleaner usage. Please check if your question cannot find a more specific topic below before posting here !<br>
This section is now READ ONLY, please choose the section below that fit your question !

Moderators: FlorianB, Pascal, bourgeois, mentor

jasonegli
Posts: 6
Joined: Wed Oct 18, 2006 3:25 am

SSL Certificate

Postby jasonegli » Mon Jan 15, 2007 3:43 pm

Anybody know how to install a godaddy SSL certificate on mailcleaner? I have a .crt file i got from them, but whenever I update my httpd.conf file, it gets overwritten on the service restart. I think I need the following to get it to work, but I'm guessing I need to change a script or database to get the httpd.conf file to update correctly:

AddType application/x-x509-ca-cert .crt
SSLCertificateFile /usr/mailcleaner/etc/apache/certs/mailcleaner.crt
SSLCertificateKeyFile /usr/mailcleaner/etc/apache/certs/mailcleaner.key
SSLCertificateChainFile /usr/mailcleaner/etc/apache/certs/sf_issuing.crt

Any help is appreciated.
olivier
Posts: 1348
Joined: Thu Jan 01, 1970 1:00 am
Contact:

Postby olivier » Mon Jan 15, 2007 7:56 pm

put your certificate in the same file as the private key and store this in the /usr/mailcleaner/etc/apache/certs directory.

Then:

Code: Select all

> echo "USE mc_config; UPDATE httpd_config SET certificate_file='your_file_name';" | /usr/mailcleaner/bin/mc_mysql -m
> /usr/mailcleaner/etc/init.d/apache restart
jasonegli
Posts: 6
Joined: Wed Oct 18, 2006 3:25 am

Postby jasonegli » Mon Jan 15, 2007 8:59 pm

Oliver,

Thanks for the quick reply. When I run those commands, apache is not able to restart successfully. I noticed that the current key is a .pem file. Is there anything special I need to do to get the .crt files I have to work?

Thanks
olivier
Posts: 1348
Joined: Thu Jan 01, 1970 1:00 am
Contact:

Postby olivier » Mon Jan 15, 2007 9:19 pm

Code: Select all

> cat yourcertfile.crt yourkeyfile.key > yourfullcert.pem


you must have both the key and the certificate in only one file.
Also remember that for apache being able to restart automatically, you must NOT have a password on the key.
jasonegli
Posts: 6
Joined: Wed Oct 18, 2006 3:25 am

Postby jasonegli » Mon Jan 15, 2007 10:54 pm

Thanks Oliver, that worked perfectly.

Return to “General help”

Who is online

Users browsing this forum: No registered users and 7 guests