SSL install in Centos 7 and using Pimcore 5 stack

khanjalal 2018-05-20 14:32:04 UTC #1

Keywords: Pimcore - Linux - Technical issue - Secure Connections (SSL/HTTPS)
Description:
How to install Let's encrypt SSL on my Pimcore 5 with Apache and centos 7 cloud vps. My application folder like /opt/y/ and want to install other application on this server and it'll serve Https as well.

please help

michiel 2018-05-21 15:24:46 UTC #2

Hi @khanjalal,

You can find more information about enabling SSL in the following section of our docs:

https://docs.bitnami.com/installer/apps/pimcore/#how-to-create-an-ssl-certificate

Regards,
Michiel

Please, click on if you think my answer was helpful

khanjalal 2018-05-22 15:27:02 UTC #3

Thanks for your feedback, I read it but no luck. Can you delve deeper where I made wrong.

5912bf14-e9bc-87bd-3856-9d3ad1457e91

michiel 2018-05-23 10:44:32 UTC #4

Could you give more details about the issue you are having? In which exact step of the guide are you stuck and which error are you getting?

Regards,
Michiel D'Hont

khanjalal 2018-05-23 11:54:44 UTC #5

Hi, Apache is not started and log shown:

Sat May 19 07:10:49.215234 2018] [ssl:warn] [pid 26731] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 19 07:10:49.280959 2018] [ssl:warn] [pid 26732] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name

michiel 2018-05-24 10:33:16 UTC #6

Could you check if the DNS is configured properly? It seems to point to two different IPs. Do you have a load balancer or any other service that redirects the requests to your server?

Could you paste the output of the following command?

ls -la /home/tumari/.acme.sh/palolik.com/

Regards,
Michiel

khanjalal 2018-05-24 12:13:09 UTC #7

[tumari@pm5-raw ~]$ ls -la /opt/y/apache2/conf/
total 292
drwxr-xr-x 5 root root 4096 May 23 16:26 .
drwxr-xr-x 14 root root 4096 May 19 07:10 ..
drwxr-xr-x 2 root root 4096 May 19 07:10 bitnami
lrwxrwxrwx 1 root root 23 May 23 16:26 ca_bundle.crt -> /tmp/cert/ca_bundle.crt
-rw-r--r-- 1 root root 289 May 19 07:10 deflate.conf
drwxr-xr-x 2 root root 4096 May 19 07:08 extra
-rw-r--r-- 1 root root 20037 May 22 18:45 httpd.conf
-rw-r--r-- 1 root root 13077 Apr 6 14:18 magic
-rw-r--r-- 1 root root 60847 Apr 6 14:18 mime.types
-rw-r--r-- 1 root root 7413 Aug 3 2012 modsecurity.conf
drwxr-xr-x 3 root root 4096 May 19 07:08 original
-rw-r--r-- 1 root root 17154 May 19 07:08 pagespeed.conf
-rw-r--r-- 1 root root 120982 May 19 07:08 pagespeed_libraries.conf
-rw-r--r-- 1 root root 193 May 19 07:09 php-fpm-apache.conf
-rw-r--r-- 1 root root 1834 May 19 07:10 privkey.pem
lrwxrwxrwx 1 root root 25 May 23 16:26 server.crt -> /tmp/cert/certificate.crt
-rw------- 1 tumari tumari 1184 May 19 07:10 server.crt.old
-rw------- 1 tumari tumari 997 May 19 07:10 server.csr.old
lrwxrwxrwx 1 root root 21 May 23 16:26 server.key -> /tmp/cert/private.key
-rw------- 1 tumari tumari 1675 May 19 07:10 server.key.old
-rw-r--r-- 1 root root 197 May 19 07:10 ssi.conf
[tumari@pm5-raw ~]$

hi, I have changed certificate location and output is above. Yes, I use Cloudflare free service and DNS configured properly in CF.
thanks

michiel 2018-05-28 16:18:38 UTC #8

The error log shows the following error, which points to a configuration error:

 Failed to configure certificate palolik.com:443:1 (with chain), check /home/tumari/.acme.sh/palolik.com/palolik.com.key
 (Expecting: TRUSTED CERTIFICATE) -- Bad file contents or format - or even just a forgotten SSLCertificateKeyFile?

Could you share the output of the following command?

ls -la /home/tumari/.acme.sh/palolik.com/

Regards,
Michiel D'Hont

system 2018-06-11 16:18:41 UTC #9

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Powered by Discourse, best viewed with JavaScript enabled

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!

SugarCRM

Drupal

WordPress

Joomla!

Redmine