Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: nfraser on July 29, 2005, 10:53:03 AM

Title: Help needed installing an SSL certificate on SME 6.01
Post by: nfraser on July 29, 2005, 10:53:03 AM

Hi

I've been using SME for several years as an intranet server but have just set one up as a internet server. Part of the plan was to offer online sales but I'm having trouble with the SSL certificate.

I've created a certificate request, sent it to the SSL supplier and received my certificate back. Placing the SSL certificate in /home/e-smith/ssl.key/ as explained in Craig Genner's HOW-TO and restarted the HTTP demon. However secure connections (https://) still use the 'old' self-signed SME generated certificate.

How do I get the server to use the new one for secure connections?

TIA

Title: Server cert
Post by: gbaird on July 29, 2005, 04:02:41 PM

Make sure you have removed the old cert from your browser cache

In Mozilla or Firefox go to preferences then securuty and remove the old accepeted cert

Title: Help needed installing an SSL certificate on SME 6.01
Post by: nfraser on July 29, 2005, 06:24:41 PM

Just gave it a try and it didn't help.

Some more information might be useful: The server name is "server" and the domain name is "cldirect.co.uk". The self signed certificate was therefore for server.cldirect.co.uk.

My new certificate from the CA is for www.cldirect.co.uk

How do I get Apache to use this certificate or should I rename the server "www". "www" is an alis of this server as per every default installation I have performed.

Have I configured something incorrectly?

Title: Help needed installing an SSL certificate on SME 6.01
Post by: nfraser on July 29, 2005, 06:26:19 PM

Sorry - I've just realised I forgot to say "Thanks!" to gbaird for his suggestion.

Title: Help needed installing an SSL certificate on SME 6.01
Post by: Mumm-Ra on July 29, 2005, 06:40:38 PM

yup, just rename the cert to server.cldirect.co.uk.crt and your key to server.cldirect.co.uk.key.

Should then work fine.  Make sure though that the permission of your cert & key match the originals.

My cert is for mail.<mydomain> but my server is called ...mummra

Title: Help needed installing an SSL certificate on SME 6.01
Post by: charlien on August 02, 2005, 05:51:56 PM

If you do a search in these forums you will find a very detailed howto. I did it a year ago and it worked fine. Don't remember what I did so I'm afraid I'm not much help except to encourage you to keep looking.

Title: Help needed installing an SSL certificate on SME 6.01
Post by: mrjhb3 on August 07, 2005, 05:56:55 PM

Quote from: "charlien"

If you do a search in these forums you will find a very detailed howto. I did it a year ago and it worked fine. Don't remember what I did so I'm afraid I'm not much help except to encourage you to keep looking.

Here is a link on chaloner site:

http://www.chaloner.ca/article.php?story=20020922181652718

JB