Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: william_syd on January 19, 2006, 10:10:08 AM

Title: SME 6 Jan06 Updates and SSL Certs reset.
Post by: william_syd on January 19, 2006, 10:10:08 AM

My web and mail ssl certs have reverted back to self-signed certificates.

Would this of been caused by the Jan 11 updates? The valid from dates would indicate it is.


Regards,
William.

Title: Re: SME 6 Jan06 Updates and SSL Certs reset.
Post by: CharlieBrady on January 19, 2006, 09:03:36 PM

Quote from: "william_syd"

My web and mail ssl certs have reverted back to self-signed certificates.

If that is the case, then you hadn't set up the signed certificates correctly.  What you should have done was to put your certificate and key files somewhere safe on the server, and then do:

/sbin/e-smith/config setprop modSSL crt /path/to/certificate
/sbin/e-smith/config setprop modSSL key /path/to/keyfile
/sbin/e-smith/signal-event post-upgrade
/sbin/e-smith/signal-event reboot

The SME server would then no longer use the self signed certificate (but might update the self-signed cert from time to time).

Title: Re: SME 6 Jan06 Updates and SSL Certs reset.
Post by: william_syd on January 23, 2006, 12:36:47 PM

Quote from: "CharlieBrady"

/sbin/e-smith/config setprop modSSL crt /path/to/certificate
/sbin/e-smith/config setprop modSSL key /path/to/keyfile
/sbin/e-smith/signal-event post-upgrade
/sbin/e-smith/signal-event reboot

If the above is the correct way then yes, I havn't done it correctly.

The above worked for both web and secure email.

I originally followed the how-to located here - http://no.longer.valid/phpwiki/index.php/Creating%20a%20CA%20signed%20SSL%20Certificate

Should I amend the wiki to include your correct method ?


Regards,
William.

Title: Re: SME 6 Jan06 Updates and SSL Certs reset.
Post by: CharlieBrady on January 23, 2006, 05:32:56 PM

Quote from: "william_syd"

Should I amend the wiki to include your correct method ?

Sure. Why not?