PDA

View Full Version : SSL installation // beginning process


whey
12-14-2008, 10:57 PM
My SSL provider just came back to me and now i need to generate a csr code. I tried the following:

openssl req -new -key server.key -out server.csr

And nothing happened so I installed openssl 0.9.8i and still nothing, it comes back with:

Error opening Private Key server.key
5811:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('server.key'
,'r')
5811:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:
unable to load Private Key

any ideas as to what to do? thanks.

whey
12-15-2008, 04:29 PM
Got that figured out, was putting the file in the wrong directory.

however now i got the domainname.key and domainname.csr put in /home/userx for now. where do these files need to placed to work in lsws?

Thanks,
Andrew

mistwang
12-15-2008, 07:09 PM
We usually put it in /opt/lsws/conf/cert

whey
12-17-2008, 09:59 PM
Got the crt from my SSL provider but now I am getting a ssl_error_no_cypher_overlap error:

https://snailface.org

I have both the private and cert path provided in a new listener with a 128 bit encyrption on ssl v3.0,

Any solutions?

Thanks,

mistwang
12-17-2008, 10:06 PM
check TLS and encryption level "HIGH"

whey
12-17-2008, 10:19 PM
thanks, works now :)

cheers!

whey
12-17-2008, 10:28 PM
is there a way to set all logins thought the litespeed cp to ssl? I thought I seen it around in the manuel can't seem to now.

mistwang
12-18-2008, 12:18 PM
You need to change the admin listener configuration.

anewday
12-18-2008, 02:44 PM
Set Secure to YES in Admin Listener.

http://www.litespeedtech.com/support/wiki/doku.php#https_ssl_configuration