Topic: SSL Certificate help needed

[Kobus]

I recently started to look at getting a signed SSL cert installed, but none of the posts i found was able to answer my questions.

I bought a SSL cert from PositiveSSL that uses the Komodo system. They sent me a ZIP file with the following files:
domain.co.uk.ca-bundle and .crt

How do I need to proceed to get this ssl cert installed and working?

Thanks

Kobus

[Stefano]

kobus, maybe this can help you..

Ciao
Stefano

[Kobus]

Hi

I read through this and basically it says:
1 create CSR
2 get cert
3 create crt
4 do config setprop modSSL crt /home/e-smith/ssl.crt/{domain}.crt
5 config setprop modSSL key /home/e-smith/ssl.key/{domain}.key

then i first tried signal-event console-save
and after that signal-event post-upgrade
signal-event reboot

but it still says the site uses a unsigned cert.

The other question I have is how do i enable seperate certs for seperate domains on the same sme?

Thanks

Kobus

[CharlieBrady]

but it still says the site uses a unsigned cert.

Did you put your new key and signed crt where you told SME it would be?

The other question I have is how do i enable seperate certs for seperate domains on the same sme?

As has been said here and elsewhere many times, it is not possible. The certificate is used to negotiate SSL before the server is told in the request what domain name is being requested.

[janet]

kbensch

The other question I have is how do i enable seperate certs for seperate domains on the same sme?

When you follow this howto
http://wiki.contribs.org/Custom_CA_Certificate

you run this routine
./cacert_csr_request

which will include all the domains on your server, and the certificate generated will work OK for all those domains.

[Kobus]

Did you put your new key and signed crt where you told SME it would be?

Yes I did. I checked it twice.

[Kobus]

kbensch

When you follow this howto
http://wiki.contribs.org/Custom_CA_Certificate

you run this routine
./cacert_csr_request

which will include all the domains on your server, and the certificate generated will work OK for all those domains.

Hi Mary

I did run this file and will check this when I get the first one sorted, i.e. the fact that it is not seeing the new cert.