Do I need a new IP for my SSL website?

11 posts / 0 new
Topic locked
Last post
#1 Tue, 09/04/2012 - 10:25
alexandralin

Do I need a new IP for my SSL website?

Good Day all,

As usually, I need your help about Virtualmin... :-)

I have set 6 virtual servers for six websites in centOS Linux 5.8. All virtual servers use one IP, 184.175.xx.xx.

Currently I want set SSL in a new virtual server, need your help about:

  1. Do I need a new dedicated IP for my SSL website? If it need, can I set from virtualmin or I must buy a new IP?

  2. I found this tutorial http://www.virtualmin.com/documentation/id,ssl_and_virtualmin/#adding_a_..., can you advise other tutorial for a reference?

Thanks in advance for your kind help.

Best regards,

Tue, 09/04/2012 - 11:55
andreychek

Howdy,

You need one IP address per SSL certificate.

So if you aren't using SSL with your current IP, you can just enable the SSL feature in your existing domain without changing the IP.

-Eric

Tue, 09/04/2012 - 12:49
alexandralin

Thanks for your quick respond, Eric.

To access my server, I use https on https:// blablabla.com:11201/

So, I must buy a new IP, is it right?

On the other hand, if I don't use https on https:// blablabla.com:11201/, is it OK for server security?

Thanks in advance... :-)

Tue, 09/04/2012 - 15:44
andreychek

Well, I'm assuming port 11201 is your Webmin/Virtualmin installation?

If so, that doesn't count :-)

It's one SSL cert per IP address on a given port... so within Apache, on port 443 -- if you aren't currently using SSL, then just go into Edit Virtual Server -> Enabled Features, and enable the SSL Website feature in order to setup SSL for that domain.

-Eric

Thu, 09/06/2012 - 14:00
alexandralin

Hi Eric,

I can't find an option of enable the SSL Website feature in Edit Virtual Server -> Enabled Features.

I changed New HTTPS (SSL) port from port 443 to 80 in Server Configuration> Change IP Address. When I access the url https:// blablabla.com, it display Apache 2 Test Page.

Please let me know what can I do, I have bought an SSL certificate from NC.

Thanks for your kind help.

Fri, 09/07/2012 - 00:05
andreychek

Howdy,

Hmm, is there a reason you changed the SSL port to 80? That's likely to cause some problems :-)

The SSL port is port 443 by default, and is what browsers connect to if you begin a URL with "https://".

I would recommend keeping the HTTP port as 80, and the HTTPS port as 443.

Also, after you reset that, if you're still not seeing an option to enable SSL -- make sure that you're logging in as root, it's possible that the Virtual Server owner doesn't have permission to enable that.

-Eric

Fri, 09/07/2012 - 01:30
helpmin

If you upgrade to Centos 6, then you wouldn't need one ip per ssl. Apache on Centos 6 supports SNI (and it works virtually on all modern browsers)

Fri, 09/07/2012 - 12:47 (Reply to #7)
alexandralin

Thanks your advice, but I'm very new in CentOs. After I read some forums, they said it is hard to upgrade, a low success rate. Thanks... :-)

Fri, 09/07/2012 - 04:11
alexandralin

Hi Eric,

I have changed back to port 443. I also logging as root, but still don't find an option to enable SSL. Do I need create my virtual server from the first step?

I also tried to stick SSL website in System Settings-> Features and Plugins and get error message:

"Failed to save enabled features : Virtualmin is configured to setup DNS zones, but this system is not setup to use itself as a DNS server. Either add 127.0.0.1 to the list of DNS servers, or turn off the BIND feature on the module config page. It appears that DHCP is being used to dynamically configure your network interfaces, which can cause the DNS servers to be set based on settings provided by the DHCP server. Using a static IP address is strongly recommended with Virtualmin."

Thanks in advance.

Fri, 09/07/2012 - 09:01
andreychek

Howdy,

Did you try any of the suggestions in that error message? :-)

There's some additional notes on that error here in the section titled "Received Virtualmin error that 127.0.0.1 isn't listed in /etc/resolv.conf":

http://www.virtualmin.com/documentation/dns/faq

Fri, 09/07/2012 - 13:01 (Reply to #10)
alexandralin

Hi Eric,

I have followed your instructions:

  1. I logged as root and can't find /etc/resolv.conf
  2. I try the second step in http://www.virtualmin.com/documentation/dns/faq
  3. 'System Settings' -> 'Virtualmin Configuration' -> 'Advanced Settings', and set 'Check resolv.conf for this system' to 'No'.
  4. Add 127.0.0.1 to the list of DNS servers in Webmin -> Networking -> Network Configuration -> Hostname and DNS client.
  5. Back to Virtualmin, stick SSL website in System Settings-> Features and Plugins... I don't get Error message anymore.
  6. Edit Virtual Server -> Enabled Features, and enable the SSL Website feature
  7. I can access https:// mywebsite.com
  8. Currently I'll do Requesting a Certificate like in http://www.virtualmin.com/documentation/id,ssl_and_virtualmin/#adding_a_...
  9. Thanks a lots Eric for your best supports... :-)

Best regards,

Topic locked