How to update ISPConfig 3 SSL Certificate

How to update ISPConfig 3 SSL Certificate

This tutorial describes how to update an SSL certificate in the ISPConfig 3 Control Panel. There are two optional methods:

• Use OpenSSL to create a new OpenSSL Certificate and CSR.
• Update the SSL Certificate with ISPConfig updater

I will start from updating the SSL Certificate manually.

 

1) Use OpenSSL to create a new ISPConfig 3 SSL Certificate

Log on to your server as the root user. Before creating a new SSL Certificate, back up the existing one. The SSL certificate is secure and sensitive, so I store it in the/root/directory.

1. tar pcfz /root/ispconfig_ssl_backup.tar.gz /usr/local/ispconfig/interface/ssl
2. chmod600/root/ispconfig_ssl_backup.tar.gz

Create a new SSL Certificate key, certificate request (CSR), and self-issuing certificate.

1. cd/usr/local/ispconfig/interface/ssl
2. openssl genrsa -des3 -out ispserver.key 4096
3. openssl req -new-key ispserver.key -out ispserver.csr
4. openssl x509 -req -days 3650-in ispserver.csr \
5. -signkey ispserver.key -out ispserver.crt
6. openssl rsa -in ispserver.key -out ispserver.key.insecure
7. mv ispserver.key ispserver.key.secure
8. mv ispserver.key.insecure ispserver.key

Restart apache to load the new SSL Certificate

1. service apache2 restart

 

2) use the ISPConfig installer to update the SSL Certificate

Another alternative to getting a new SSL Certificate is to use the ISPConfig update script. Download ISPConfig to the/tmp directory, decompress the package, and run the script.

1. cd/tmp
2. wget http://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gz
3. tar xvfz ISPConfig-3-stable.tar.gz
4. cd ispconfig3_install/install
5. php -q update.php

The update script will ask the following questions during the update:

1. CreatenewISPConfig SSL certificate (yes,no)[no]:

The answer "yes" is displayed. the SSL certificate creation dialog box starts.

Via: http://www.faqforge.com/linux/how-to-renew-the-ispconfig-3-ssl-certificate/

Author: Till Translator: geekpi Proofreader: wxy

This article was originally compiled by LCTT and launched with the honor of Linux in China

This article permanently updates the link address: