LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 02-02-2015, 10:55 AM   #1
dvazart
LQ Newbie
 
Registered: Aug 2009
Posts: 3

Rep: Reputation: 0
SSL site migration


Hello everyone,

I am migrating a site that uses an SSL certificate purchased at Hostmonster (COMODO CA Limited).

The site is hosted on a VPS (pure LAMP) with the following certificates:

Code:
root@xxxx:~# gpg --homedir /var/www --list-key
gpg: WARNING: unsafe ownership on homedir `/var/www'
/var/www/pubring.gpg
--------------------
pub   2048R/E4BXXXC1 2013-11-26 [expires: 2015-02-11]
uid                  XXXXXXXX - 2014 (www.XXXXX.com) <info@XXXXXXX.com>
sub   2048R/3BXXXXD9 2013-11-26 [expires: 2015-02-11]

pub   2048D/DCXXX68 2014-09-18
uid                  XXXXXXXXXX (www.XXXXX.com) <marketing@XXXXXX.com>
sub   2048g/00XXX374 2014-09-18

pub   2048D/F7XXX781 2014-10-01
uid                  XXXXXXXXXX (www.XXXXX.com) <marketing@XXXXXX.com>
sub   2048g/19XXX113 2014-10-01
Code:
root@xxxx:~# cat /etc/apache2/sites-enabled/www.xxxxxx.com-sll
...
	#   SSL Engine Switch:
	#   Enable/Disable SSL for this virtual host.
	SSLEngine on

	#   A self-signed (snakeoil) certificate can be created by installing
	#   the ssl-cert package. See
	#   /usr/share/doc/apache2.2-common/README.Debian.gz for more info.
	#   If both key and certificate are stored in the same file, only the
	#   SSLCertificateFile directive is needed.
	SSLCertificateFile    /etc/ssl/www.xxxxx.com.crt
	SSLCertificateKeyFile /etc/ssl/www.xxxxx.com.key
...
Code:
root@xxxx:~# ls /etc/ssl/
certs  openssl.cnf  private  www.xxxxxx.com.crt  www.xxxxxx.com.key
I want to migrate this certificate to a Debian VPS with VestaCP.

Note:

I already try to "copy and paste" the certificates manually in VestaCP, but I got this error message:

Code:
Error: SSL Certificate is not valid
Both servers have different IP addresses but I can switch the addresses between the servers.

I have also a third certificate .CSR, I suppose this is the csr generated on the old server, but i don't know.

So any walkthrough or help with this be welcome !

Thanks,
 
Old 02-03-2015, 03:07 PM   #2
sudowtf
Member
 
Registered: Nov 2013
Posts: 205

Rep: Reputation: 46
why not scp the certificate files?

on old server:
Code:
scp /etc/ssl/www.*.com.??? root@NEWSERVER_:/etc/ssl/
The CSR (certificate signing request) is only used when ordering a certificate and can be generated anywhere as far as i know. i use this to give me the proper commandline to execute: https://www.digicert.com/easy-csr/openssl.htm
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Geetting error after site migration linuxrndblog Linux - Server 10 11-14-2013 06:07 PM
joomla site migration problems taske Linux - Server 2 10-26-2010 11:28 AM
creating an SSL page under non SSL site with apache1.33? taiwf Linux - Software 1 06-27-2006 01:06 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:10 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration