Re: [PacketFence-users] Captive portal SSL not using defined cert after PF7 upgrade

[Sokolowski, D. <DS...@ea...>]

Thanks Fabrice,
I concatenated my server certificate and server key as suggested and restarted pf, but unfortunately when I access the portal page, I am still getting the certificate issued by/to 127.0.0.1 instead of my Comodo certificate.
If it helps, my ssl-certificates.conf file looks like:

SSLCertificateFile /usr/local/pf/conf/ssl/star_mydomain_com_SHA2.pem
SSLCertificateKeyFile /usr/local/pf/conf/ssl/star_mydomain_com_SHA2.key
SSLCertificateChainFile /usr/local/pf/conf/ssl/ComodoCA_SHA2.bundle

Thanks
Darryl

From: Fabrice Durand [mailto:fd...@in...]
Sent: Thursday, April 27, 2017 8:43 AM
To: pac...@li...
Subject: Re: [PacketFence-users] Captive portal SSL not using defined cert after PF7 upgrade


Hello Darryl,

haproxy terminate the ssl tunnel, so you need to do something like that with your cert:

cat /usr/local/pf/conf/ssl/server.crt /usr/local/pf/conf/ssl/server.key > /usr/local/pf/conf/ssl/server.pem

Regards

Fabrice



Le 2017-04-26 à 21:53, Sokolowski, Darryl a écrit :
Hi all,
When on 6.5.1 I had purchased and installed an SSL certificate for the portal and admin.  Installed and updated ssl-certificates.conf and no certificate errors.
After the upgrade to version 7, ssl-certificates.conf still has the correct certificate referenced, but the portal is using the self-signed certificate instead.
Admin page does use the correct certificate.
I checked both /usr/local/pf/conf/httpd.conf.d/ssl-certificates.conf and /usr/local/pf/var/conf/ssl-certificates.conf and both are correct, but incorrect cert used on the portal page.

Anyone know how to make it use the correct certificate now?

Thanks


________________________________



------------------------------------------------------------------------------

Check out the vibrant tech community on one of the world's most

engaging tech sites, Slashdot.org! http://sdm.link/slashdot




_______________________________________________

PacketFence-users mailing list

Pac...@li...<mailto:Pac...@li...>

https://lists.sourceforge.net/lists/listinfo/packetfence-users



--

Fabrice Durand

fd...@in...<mailto:fd...@in...> ::  +1.514.447.4918 (x135) ::  www.inverse.ca<http://www.inverse.ca>

Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org)


________________________________

>>> CONFIDENTIALITY NOTICE <<<

This electronic mail (e-mail) message, including any and/or all attachments, is for the sole use of the intended recipient(s), and may contain confidential and/or privileged information, pertaining to business conducted under the direction and supervision of EarthColor, Inc. All e-mail messages, which may have been established as expressed views and/or opinions (stated either within the e-mail message or any of its attachments), are left to the sole responsibility of that of the sender, and are not necessarily attributed to EarthColor, Inc. Unauthorized interception, review, use, disclosure or distribution of any such information contained within this e-mail message and/or its attachment(s), is(are) strictly prohibited. If you are not the intended recipient, please contact the sender by replying to this e-mail message, along with the destruction of all copies of the original e-mail message (along with any attachments).