Koozali.org: home of the SME Server

SME 6 Jan06 Updates and SSL Certs reset.

Offline william_syd

  • ****
  • 1,608
  • +0/-0
  • Nothing to see here.
    • http://www.magicwilly.info
SME 6 Jan06 Updates and SSL Certs reset.
« on: January 19, 2006, 10:10:08 AM »
My web and mail ssl certs have reverted back to self-signed certificates.

Would this of been caused by the Jan 11 updates? The valid from dates would indicate it is.


Regards,
William.
Regards,
William

IF I give advise.. It's only if it was me....

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: SME 6 Jan06 Updates and SSL Certs reset.
« Reply #1 on: January 19, 2006, 09:03:36 PM »
Quote from: "william_syd"
My web and mail ssl certs have reverted back to self-signed certificates.


If that is the case, then you hadn't set up the signed certificates correctly.  What you should have done was to put your certificate and key files somewhere safe on the server, and then do:

/sbin/e-smith/config setprop modSSL crt /path/to/certificate
/sbin/e-smith/config setprop modSSL key /path/to/keyfile
/sbin/e-smith/signal-event post-upgrade
/sbin/e-smith/signal-event reboot

The SME server would then no longer use the self signed certificate (but might update the self-signed cert from time to time).

Offline william_syd

  • ****
  • 1,608
  • +0/-0
  • Nothing to see here.
    • http://www.magicwilly.info
Re: SME 6 Jan06 Updates and SSL Certs reset.
« Reply #2 on: January 23, 2006, 12:36:47 PM »
Quote from: "CharlieBrady"


/sbin/e-smith/config setprop modSSL crt /path/to/certificate
/sbin/e-smith/config setprop modSSL key /path/to/keyfile
/sbin/e-smith/signal-event post-upgrade
/sbin/e-smith/signal-event reboot



If the above is the correct way then yes, I havn't done it correctly.

The above worked for both web and secure email.

I originally followed the how-to located here - http://no.longer.valid/phpwiki/index.php/Creating%20a%20CA%20signed%20SSL%20Certificate

Should I amend the wiki to include your correct method ?


Regards,
William.
Regards,
William

IF I give advise.. It's only if it was me....

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: SME 6 Jan06 Updates and SSL Certs reset.
« Reply #3 on: January 23, 2006, 05:32:56 PM »
Quote from: "william_syd"

Should I amend the wiki to include your correct method ?


Sure. Why not?