Koozali.org: home of the SME Server

Help needed installing an SSL certificate on SME 6.01

nfraser

Help needed installing an SSL certificate on SME 6.01
« on: July 29, 2005, 10:53:03 AM »
Hi

I've been using SME for several years as an intranet server but have just set one up as a internet server. Part of the plan was to offer online sales but I'm having trouble with the SSL certificate.

I've created a certificate request, sent it to the SSL supplier and received my certificate back. Placing the SSL certificate in /home/e-smith/ssl.key/ as explained in Craig Genner's HOW-TO and restarted the HTTP demon. However secure connections (https://) still use the 'old' self-signed SME generated certificate.

How do I get the server to use the new one for secure connections?

TIA

gbaird

Server cert
« Reply #1 on: July 29, 2005, 04:02:41 PM »
Make sure you have removed the old cert from your browser cache

In Mozilla or Firefox go to preferences then securuty and remove the old accepeted cert

nfraser

Help needed installing an SSL certificate on SME 6.01
« Reply #2 on: July 29, 2005, 06:24:41 PM »
Just gave it a try and it didn't help.

Some more information might be useful: The server name is "server" and the domain name is "cldirect.co.uk". The self signed certificate was therefore for server.cldirect.co.uk.

My new certificate from the CA is for www.cldirect.co.uk

How do I get Apache to use this certificate or should I rename the server "www". "www" is an alis of this server as per every default installation I have performed.

Have I configured something incorrectly?

nfraser

Help needed installing an SSL certificate on SME 6.01
« Reply #3 on: July 29, 2005, 06:26:19 PM »
Sorry - I've just realised I forgot to say "Thanks!" to gbaird for his suggestion.

Mumm-Ra

Help needed installing an SSL certificate on SME 6.01
« Reply #4 on: July 29, 2005, 06:40:38 PM »
yup, just rename the cert to server.cldirect.co.uk.crt and your key to server.cldirect.co.uk.key.

Should then work fine.  Make sure though that the permission of your cert & key match the originals.

My cert is for mail.<mydomain> but my server is called ...mummra

Offline charlien

  • ****
  • 88
  • +0/-0
    • http://www.rn-computing.com
Help needed installing an SSL certificate on SME 6.01
« Reply #5 on: August 02, 2005, 05:51:56 PM »
If you do a search in these forums you will find a very detailed howto. I did it a year ago and it worked fine. Don't remember what I did so I'm afraid I'm not much help except to encourage you to keep looking.
...

Offline mrjhb3

  • *
  • 1,188
  • +0/-0
    • John Bennett Services
Help needed installing an SSL certificate on SME 6.01
« Reply #6 on: August 07, 2005, 05:56:55 PM »
Quote from: "charlien"
If you do a search in these forums you will find a very detailed howto. I did it a year ago and it worked fine. Don't remember what I did so I'm afraid I'm not much help except to encourage you to keep looking.


Here is a link on chaloner site:

http://www.chaloner.ca/article.php?story=20020922181652718

JB
......