Loading a certificate

Support
, ,
1

I have a running nethserver 7.7.1908 with all the usual RoundCube webmail, html dashboards, etc, but in addition, I have a phpBB3 forum running under /var/log/html, and a second website (different FQDN) running in a virtual host. Things seem to be running pretty well, but now I want to use a Let’sencrypt certificate, because my users are unhappy with the warnings they are seeing.

I’ve Googled around and found lots of partial answere, but what I’d like is a howto that walks a complete certificate novice through the process, as safely as possible because I can’t afford to get this wrong on a live production system.

Can anyone point me in the right direction?

Thanks Guys!

Jim

2

Hi Jim,

you can do it directly via the dashboard under the point server certificate.

Regards…

Uwe

3

http://docs.nethserver.org/en/v7/base_system.html#server-certificate

4

Thanks for the help guys, that worked perfectly! Only thing I need to check with you is: do I need to do anything special for the additional website on the virtual host except edit the host to use the certificate…? It all seens to easy!

5

I dont think so. You just have to specify the FQDN of Virtualhost when applying for a certificate.

Regards

Uwe

6

Nope. You could alternatively make a second Let’s Encrypt cert for that virtual host, and edit that host to use that cert instead–either will work.

7

I browsed to the URL of the website on the Virtual Host, and its fine on http (of course). The I browsed using https, and got a warning:

"Web sites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for www.(virtualhost sitename).org. The certificate is only valid for www.(basehost sitename).net.

Error code: SSL_ERROR_BAD_CERT_DOMAIN

View Certificate"
I looked at the certificate, and it the right one for the main site so the error is not surprising, the virtual hosted site is trying to use the real hosted site’s certificate, and that is breaking security.

However, when I go to the virtual hosted enrty in the GUI, I only have the choice of the default platform certificate, or the one loaded from LetsEncrypt for the main site, so I went to the “Certificate” page and attempted to request a certificate for the virtual-hosted website and got the error:

"[Domains](https://www.(basehost sitename):980/en-US/Pki#Pki_GenerateLe_LetsEncryptDomains)

Challenge failed for domain (virtualhost sitename).org Some challenges have failed."

I can’t see anything in the logs, but there is a good chance I’m looking in the wrong place…can you suggest anything?

Thanks

Jim

8

Cancel that last question! I was using a wildcard @.(sitename).org DNS entry. I added a DNS entry for www.(sitename).org, and was able to get a certificate. Assigned that to the site, and all is well

Thanks Guys!

Jim