Jump to content
Froxlor Forum
  • 0

[solved] Enable SSL with own certificates for customers' domains


Nepstar

Question

Hi together

 

As meanwhile long-term Froxlor user I have to make a pretty stupid question:

 

I'd like to provide own SSL certificates to our customers where the certs are already available. Now honestly I'm failing with applying the certs to the vHosts' configurations.

So my question is: where in Froxlor do I have to use those lines:

 

<IfModule mod_ssl.c>

 

 SSLEngine On
 SSLCertificateFile /etc/apache2/ssl/customer-related-domain.crt
 SSLCertificateKeyFile /etc/apache2/ssl/customer-related-domain.key
 SSLCACertificateFile /etc/apache2/ssl/ca.pem
 SSLCertificateChainFile /etc/apache2/ssl/customer-related-domain.ca.pem
</IfModule>
 
I was already testing under Domains > customer's domain > Webserver Settings >> SSL (yes) / SSL redirect (NO) / own vHost settings (lines from above).
 
As almost expected, Apache won't be able to run anymore.
 
So far, you can see that the labels in Froxlor (in German) are not very clearly for me (maybe also for others) and I'd like to understand its labels for those settings better.
 
Can somebody give me a short introduction where I have to use the given lines?
 
Thank you very much in advance and so sorry for this question! (For usual I'm able to help newbies, now I feel as one :-).)
 
Kind regards,
Nepstar
Link to comment
Share on other sites

Recommended Posts

Create the IP/Port as ip:443 without checking the SSL checkbox.

 

Add in domain special settings case statements with correct certificate for the domain:

 

<If "%{SERVER_PORT} == '443'">

  <IfModule mod_ssl.c>

    SSLEngine On

    SSLCertificateFile /etc/apache2/ssl/customer-related-domain.crt
    SSLCertificateKeyFile /etc/apache2/ssl/customer-related-domain.key
    SSLCACertificateFile /etc/apache2/ssl/ca.pem
    SSLCertificateChainFile /etc/apache2/ssl/customer-related-domain.ca.pem
  </IfModule>

</If>

 

Thank you, looks already more interesting. For using Froxlor over SSL, I should make the same if-statement in the IP:Port section > Own vHost Settings?

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.



×
×
  • Create New...