SSL certificate

Support
1

hi guys
i just bought an ssl certificate from rapidssl
how can i install it into the server

2

http://docs.nethserver.org/en/latest/base_system.html#install-a-custom-certificate

3

i think i did something wrong
after i added the custom certificate and i hit this coomand

signal-event certificate-update

i couldnā€™t access the nethserver dashboard anymore

i got 2 files from rapidssl
certificate.crt and intermediate.crt
to get back to dashboard i had to use these command to remove custom certificate

db configuration setprop pki CrtFile ''
db configuration setprop pki KeyFile ''
db configuration setprop pki ChainFile ā€˜ā€™

1 Like
4

Hany have you made this work?

5

Thereā€™s no separate .key file available on the rapidssl user portal?

6

yes Nas i did that

7

So you could describe this procedure :wink:

8

i obtained the .csr file fro the server
registered the ssl certificate
installed the custom certificate
after that Apache server was down including webmail , dashboard and everything
i searched for how to delete the custom certificate through the command line
thanks god i was sable to access dashboard again

9

rapidssl have this tutoarial
the guy from rapidssl said , rapidssl does NOT provide private key file , you gonna use the file generated during CSR generation

https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO6252

10

Thatā€™s correct, you should never ā€œmoveā€ the private key from the server.
You need to locate the keyfile, certificate and intermediate, and set paths as per documentation.
As a reference hereā€™re the values on my system:

ChainFile=/etc/pki/tls/certs/sub.class2.server.ca.pem
CrtFile=/etc/pki/tls/certs/nethesis_2015-17.crt
KeyFile=/etc/pki/tls/private/nethesis.key
2 Likes
11

i did it
thanks so much

12

for those that have issues with this, dont single quote the file when adding to the DB. took me the last 2 hours to figure that out lol

1 Like
13

Thanks for the hint!

Would you mind replying to this topic?