i have a quick question about using plesk on centos 5.x server and installation of ssl certificates. if anyone out there has expertise with above,
View 1 RepliesI run a web server on Fedora 12, principally using Apache, MySQL, and PHP. I host a variety of sites, one of which is a family website that contains semi-sensitive personal data for several hundred extended family members, who all have access to the database-driven site.
Until now, I have been using a self-signed SSL certificate to encrypt the data as it is read and written back and forth from my database. Family members have simply had to put up with clicking past certificate warnings as they enter the site, as most browsers flag self-signed certificates as bad. It hasn't really been that much of a bother, but I'd love to do it more professionally. I have looked into buying SSL certificates, but it's a site I host for free and would rather find a cheap or free alternative if possible.
So I'm just fishing for ideas to work with. What are some alternatives to using SSL certificates for moderately strong website encryption? So far, I run only one host on the domain, but may eventually need encryption that would support multiple hosts. Or does anybody know a way to make self-signed certificates work on most popular browsers without being flagged as suspicious?
Until today Plesk 9.3.0 works finely on my ubuntu 8.04 dedicated server. Then i tried to install proFTPd and after that Plesk chashs.
Now i want to reinstall my plest but i have a problem i get lots of error messanges like that
Quote:
How can I remove completly plesk and install it again?
I am having problems creating ssl certificates for use with openLDAP. Does anyone know a good centos tutorial as I am having problems finding ones by searching through google and the forums.
To clarify further I have a small network im trying to setup to use ldap for auth due to the size I figured using kerberos for auth would be a bit overkill.....
I have the server up and running fine however at the moment all auth is done by using clear text (which is fine as the network has no connection to the internet at current) however in the future it will so I am trying to use ssl however I am having confusing as which certificates I point to where in the slapd.conf file
I'm installing OpenLDAP on a VSP server, CentOS 5 with Plesk at 1and1. I've tested the slapd.conf file with slaptest and it returns ok. I've tried to start ldap with /sbin/service ldap start and it says it is ok and starts. But if I try to run ldapadd I get an error message saying that it could not contact the ldap server. I check the status with /sbin/service ldap status and it show that it is not running. I can do /sbin/service ldap start, it will say it started and turn around and check the status and it will show that it is not running. Would something in Plesk be killing ldap as soon as it starts? I installed OpenLDAP via yum and have been following directions found in a couple of ldap guides.
View 5 Replies View Relateddifference between cpanel and pleak? for which service they are being used?
View 2 Replies View Relatedi am using red hat5 n i want to create X.509 certificates for ipsec vpn help me in creating certificates, not able 2 create certificates guide me ehere is the location for certificates.
View 1 Replies View RelatedI am managing a Fedora dedicated server with Plesk 9 and just recently moved the email for one of the domains on the server to Google Apps for business. Unfortunately, I cannot get email messages from the website forms to deliver to addresses on this domain. For anyone familiar with Plesk, I have disabled mail in the hosting settings by un-checking the "Activate mail service on domain" checkbox and there are no accounts in the domain. (Other readings have indicated that this should be enough to allow mail to be directed to the appropriate server). My MX records correctly point to the google apps mail server.
I'm quite comfortable with command line, but I know almost nothing about the sendmail program or its alternatives and my attempts at researching how to set up this relay has been futile. I'm pretty sure I'm using sendmail and not qmail or anything else from what the red-hat style "alternatives" symlinks point to. I've also checked the /etc/mail/access, domaintable, mailertable, sendmail.cf, virtusertable, local-host-names, sendmail.cf, and submit.cf and most of these files are empty (except the .cf files), and the sendmail.cf and submit.cf make no reference to the domain in question.
Here is the output from a sendmail test that was was not received. (Private data omitted of course).
sendmail -v xxx@yyy.com
test email from yyy.com webserver. please ignore.
xxx@yyy.com... Connecting to [127.0.0.1] via relay...
220 my.server.com ESMTP
>>> EHLO my.server.com
250-my.server.com .....
Closing connection to [127.0.0.1]
>>> QUIT
Performing the same test and sending an email to a non-hosted domain works fine.
The thing is I need a bigger server, but at the same time I'm having problems with cpanel and centos and I'm quite bored. So now I want to migrate from my cpanel server to the plesk server keeping the domain and it's content. I tried to create a ticket in plesk support but either I didn't bought the server yet. So, what's the quickier and safest way to migrate? Is there any script?
View 1 Replies View RelatedClients are not able to access FTP thru browser: ftp://IP.When you open it thru browser, it does not ask for a usename or password but shows a PUB diretory instead. I tried to telnet port 21 and shows that it is using VSFTP instead of Plesk's ProFtp.
View 1 Replies View RelatedI've installed PostgreSQL on Arch Linux & also self generated self signed certificates in /etc/ssl/ directory. My PostgreSQL 'data' directory is /var/lib/postgres/data & I've edited my postgresql.conf file to use SSL however I'm having permission / access problems starting my database using SSL. It can't access the certificates and errors out when I try and start the database engine:
Code:
LOG: autovacuum launcher shutting down
LOG: shutting down
LOG: database system is shut down
FATAL: could not load server certificate file "server.crt": No such file or directory
code....
I don't know what I need to chown or chmod in order to get PostgreSQL to access my self signed certificates.
I'm trying to set up a 2nd SSL cert on a different domain on a server, each domain has its own IP address, the problem is the Web developer that configured the first domain specified ssl keys for the primary domain in both the vhost config in httpd.conf AND in the ssl.conf config files. If I attempt to remove the keys form ssl.conf the server will not start up. and with them there It will not start up if I specify keys for the secondary domain.
ssl.conf
Code:
LoadModule ssl_module modules/mod_ssl.so
SSLCertificateFile /etc/pki/tls/certs/primary.com.crt
SSLCertificateKeyFile /etc/pki/tls/certs/primary.com.key
SSLCertificateChainFile /etc/pki/tls/certs/primary_gd_bundle.crt
I have installed Ionix vCM onto a Red Hat Linux box. It correctly communicates with the collection server if I use the Ionix certificate. However, if I use a self-generate certificate, communication fails.
(1) How do I determine which PKI certificates are resident on the Red Hat box?
(2) How do I manually install a PKI certificate?
I have vsftpd running as FTP server on Ubuntu 9.04 jaunty. Login works correctly with password for local users (those with an login account on the server) and without password for anonymous.
I want to further tighten security by requiring local users to provide a client certificate. But even if I include "require_cert=YES" and "validate_cert=YES" in etc/vsftpd.conf, clients without certificate are allowed to login; require_cert seems to be simply ignored.
I run couple of sites on a virtual hosting environment and I am in need of adding additional SSL for a different domain name. From what I read on some forum topics indicate that SSL cert requires different IP address. meaning one cert for each IP. Is this true? If so, then I'm having some difficulties understanding the benefits of running virtual host if a server can't host multiple secured site through single IP. Any way to run multiple ssl site within virtual host environment. I'm hoping for a possible workaround.
View 3 Replies View RelatedMy sendmail server makes use of the TLS_SRV_OPTIONS which is set to `V' meaning it shouldn't verify certificates. As a server, it doesn't and the {verify} macro shows "NOT" in the logs, showing that no certificate request was sent out.
Acting as a client though, and I'm talking both about the server acting as a client towards other mail servers and about the local mail submission agent, it always verifies certificates. My mail submission agent when contacting my own mail server verifies the mail servers' certificate and still, the mail server has not initiated any exchanging of certificates since it still says "verify=NOT" in the logs (whereas the same entry for the submission agent reads OK or FAIL depending on what I use).
So, does mail servers ALWAYS send out its certificates and when they do, the "client" in question (no matter if it's the mail server acting as client or the mail submission agent) validates it because the TLS_SRV_OPTIONS setting just applies to when it's running as a server, or is there a setting to tell Sendmail not to send out certificates since you're not in the business of certificate verification relaying anyways?
I'm trying to install Debian Jessie, but the installation keeps failing when installing the ca-certificates package and then asks for a media change to the disk that is already in the drive, and keeps asking even though it's already in the drive.
View 0 Replies View RelatedI've recently been asked to setup our FTP server to accept connections from a remote host. They sent me a file "id_dsa.pub" with instructions to add this key to the xfer user.
Unfortunately I've no idea how to do this!
I'm running vsftpd 2.0.5 on Centos 5.3
I have a Server with Webmin, Usermin and Sendmail using pop3s. I have created a seft signed certificate using webmin. Exported it and imported it to the trusted root certification authorities on my client. This fixes the warning message from internet explorer when attempting making a ssl connection to webmin. When attempting to use usermin or retrieving mail I get that warning that this site's certificate is self signed. I look at the certificate and its not the same as the one I created with webmin. My question is. Is possible to have the same certificate be used by each?
View 6 Replies View RelatedHow can I add self-signed certificates to e.g: Google Chrome under Linux (from the command line)?
View 1 Replies View RelatedI was wondering if it is possible to have different certificates for different directories in a https-directory ?So what I want is that for a specificry a specific TLS-certificate is needed by the http-client to be authorized to the directory.Directory /var/www/html/secure/1 needs a certificate A.Directory /var/www/html/secure/2 need a different certificate B.So I have 1 CA, which signs the other certificates of the specific directory. The http-client gets the certificate A or certificate B (to be authenticated for secure/1 of secure/2)
View 5 Replies View RelatedI am installing some SSL certificates on my web server, however I have a couple questions, as I'm not familiar with this process
1) I'm not sure which directory to put them in? What is good practice? Is /var/www/secure a good location so long as I restrict access to the secure directory?
2) I am told to edit the following in my ssl.conf file of apache2
SSLCertificateFile
SSLCertificateKeyFile
SSLCertificateChainFile
However, I cannot find this file, ssl.conf. Nor can I find the above directives in my main apache2.conf file. Where is the ssl.conf file? Or alternatively, could I just add the above directives to my apache2.conf file?
I have one physical dedicated server. The name of the server is 'mail.iamghost.tld' which is obviously my Postfix mail server for my users. Now I generated SSL self signed certificates with 'OpenSSL' which is for 'mail.iamghost.tld'. I also have Apache installed on the same server to access my webmail application. I created a pointer record for 'url' to point to the same static I.P. as 'mail.iamghost.tld'. So my question is if I also want to encrypt site login's for url, do I need to generate a unique SSL certificate for 'url' or can I use my existing SSL certificates that are assigned to 'mail.iamghost.tld'? It's the same server but when people browse to my 'url' site, I don't want there to be an issue with the certificates saying it's for 'mail.iamghost.tld' when they're really communicating with 'url'.
View 5 Replies View RelatedCan a Fedora server be remotely managed with Plesk and/or Cpanel or only via SSH?
View 1 Replies View RelatedI am trying to determine which version of Ubuntu we have installed on our Webfusion VPS in order to see how to update to specific php and mysql versions needed for installing some software.
uname -a gives this:
Linux [hostname] 2.6.18-028stab070.2 #1 SMP Tue Jul 6 14:34:09 MSD 2010 x86_64 GNU/Linux
I don't see anything that matches up to any of the Ubuntu releases. Is there any other way to determine what we have?
We have Plesk 9.5.2 on the machine.
Certain software we need to install requires PHP 5.2.10+ and Mysql 5.2+ but we currently have PHP 5.2.4-2ubuntu5.12 with Suhosin-Patch 0.9.6.2 and Ver 14.12 Distrib 5.0.51a
how to get the required versions of php and mysql (without breaking Plesk)? I tried editing /etc/apt/sources.list to add a new repository and using apt-get upgrade php but I probably did not add the correct repository.
I used the Center for Internet Security Benchmark for Apache Web Server v2.1 (January 2008) manual.
This is the guidelines I have to follow when installing and configuring Apache...So the problem arises when we get to page:28
Just after running this command: openssl x509 -in url | more
We get this error:unable to load certificate 31352:error:0906D06C:PEM routines:PEM_read_bio:no start lineem_lib.c:650:Expecting: TRUSTED CERTIFICATE
There is a way to have a CentOS installation very very minimal?Not like Damn Small Linux, but similar (as footprint)My need is create some Virtual Machine that only have BIND and SSH on it.
View 2 Replies View RelatedI tried to install php from source file on centos server and i got the error as # ./configure --with-apxs2=/usr/local/packages/apache/bin/apxs --with-mysql --prefix=/usr/local/packages/apache/php --enable-force-cgi-redirect --disable-cgi --with-zlib --with-gettext --with-gdbm
checking for specified location of the MySQL UNIX socket... no checking for MySQL UNIX socket location... /var/lib/mysql/mysql.sock checking for mysql_close in -lmysqlclient... no checking for mysql_error in -lmysqlclient... no configure: error: mysql configure failed. Please check config.log for more information.
after getting the ACL extension and then unpacking I try to phpize, but server comes up with the following error message:wget http://pecl.php.net/get/APC-3.0.19.tgz
tar xvfz APC-3.0.19.tgz
[Code]...
Alternatively I tried pecl install, but with same result. Whats wrong? I have looked in /usr/bin/sed and there is (of course) no file or directory named "sed". What is "sed" and how to recover? Would be nice, if you could give me an indication what to look for.
I am real tired of getting those SSL errors when I go to my intranet. So I am now trying to generate my own SSL certs (go me). I have easy-rsa installed for my openvpn can I use that so sign the csr?
View 2 Replies View Related