LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 03-16-2018, 06:56 AM   #1
Shr0912
LQ Newbie
 
Registered: Jan 2018
Posts: 15

Rep: Reputation: Disabled
Third Party SSl certificate on debian


Hi,

I am trying to install a third party ssl certificate on Debian 4.9.30-2+deb9u5 for subdomain a.mysite.com . Certificate has been issued by digicert.

Tried and made following changes:

In /etc/apache2/sites-available/default-ssl.conf, put location of cer and keys in
SSLCertificateFile
SSLCertificateKeyFile
SSLCertificateChainFile

It didnt worked out. I then put the module in /etc/apache2/apache.conf
<VirtualHost *:443>
DocumentRoot <location>
ServerName <Server name>
ServerAlias <Alias>
SSLEngine on
SSLCertificateFile /etc/ssl/certs/server.crt
SSLCertificateKeyFile /etc/ssl/private/server.key
SSLCertificateChainFile /etc/ssl/certs/serverCA.crt
</VirtualHost>

Everytime i make change to configuration file, apachectl configtest gives no error, but when i restart apache services, it throws error:

Job for apache2.service failed because the control process exited with error code.
See "systemctl status apache2.service" and "journalctl -xe" for details.


I had checked for 443 port, it is in listening state
Enabled modules too

Can i get help here?
Also, if there a way to know for which domain a cerificate has been issued.
And if a certificate can be used for multiple domains.
 
Old 03-16-2018, 08:29 AM   #2
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,610
Blog Entries: 4

Rep: Reputation: 3905Reputation: 3905Reputation: 3905Reputation: 3905Reputation: 3905Reputation: 3905Reputation: 3905Reputation: 3905Reputation: 3905Reputation: 3905Reputation: 3905
Well, issue one of those commands to learn more! Also look at /var/log/apache2/error.log

The configuration can be syntactically correct –*which is all that configtest looks for – but incorrect with regards to its content.

You should also be aware that some SSL problems will cause the sudo service apache2 start command to succeed, but Apache will thereafter immediately stop.

Probably the most common problem is some kind of mismatch between the domain-name of the <VirtualHost> and the information that is actually contained in the certificate.

Mattias Gerniar wrote a very nice write-up on the subject of how to retrieve and interpret certificate information in this post on his blog.
 
1 members found this post helpful.
Old 03-16-2018, 09:55 AM   #3
Shr0912
LQ Newbie
 
Registered: Jan 2018
Posts: 15

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by sundialsvcs View Post
Well, issue one of those commands to learn more! Also look at /var/log/apache2/error.log

The configuration can be syntactically correct –*which is all that configtest looks for – but incorrect with regards to its content.

You should also be aware that some SSL problems will cause the sudo service apache2 start command to succeed, but Apache will thereafter immediately stop.

Probably the most common problem is some kind of mismatch between the domain-name of the <VirtualHost> and the information that is actually contained in the certificate.

Mattias Gerniar wrote a very nice write-up on the subject of how to retrieve and interpret certificate information in this post on his blog.
Yes, these could be issues, but in my case, there was domain error
I fixed by getting certificate for correct domain.

However, i am facing another error after ssl installation.
The site is getting loaded with ssl, but in a very distorted manner.

All css files are missing. I am using magento and have enabled secure urls there.
Can you help?
 
Old 03-26-2018, 03:15 AM   #4
Shr0912
LQ Newbie
 
Registered: Jan 2018
Posts: 15

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by Shr0912 View Post
Yes, these could be issues, but in my case, there was domain error
I fixed by getting certificate for correct domain.

However, i am facing another error after ssl installation.
The site is getting loaded with ssl, but in a very distorted manner.

All css files are missing. I am using magento and have enabled secure urls there.
Can you help?

Issue got resolver after uploading missing css and js files from backup code. It runs well now.
 
  


Reply

Tags
apache, debian, ssl authentication


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SSL certificate generation question - No certificate matches private key etcetera Linux - General 1 04-10-2017 01:28 PM
How to import/use CAcert SSL root certificate to use SSL with Xchat IRC client? GrapefruiTgirl Linux - Software 9 04-05-2011 09:54 AM
Apache with SSL does not load the 2nd SSL certificate janstapel Linux - Newbie 1 06-17-2010 09:32 PM
Installing Network Solution SSL Certificate in Apache2 - Debian Stable. sinbsd Linux - Server 1 05-07-2008 05:48 PM
create a new certificate request SSL Debian Linux xxsubz78x Debian 8 12-09-2007 05:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 10:22 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration