Re: [PacketFence-users] Captive portal SSL not using defined cert after PF7 upgrade

[Fabrice D. <fd...@in...>]

Hello Darryl,

what did you do exactly ?

Regards

Fabrice



Le 2017-04-27 à 12:06, Sokolowski, Darryl a écrit :
>
> Thanks Fabrice,
>
> I concatenated my server certificate and server key as suggested and
> restarted pf, but unfortunately when I access the portal page, I am
> still getting the certificate issued by/to 127.0.0.1 instead of my
> Comodo certificate.
>
> If it helps, my ssl-certificates.conf file looks like:
>
>  
>
> SSLCertificateFile /usr/local/pf/conf/ssl/star_mydomain_com_SHA2.pem
>
> SSLCertificateKeyFile /usr/local/pf/conf/ssl/star_mydomain_com_SHA2.key
>
> SSLCertificateChainFile /usr/local/pf/conf/ssl/ComodoCA_SHA2.bundle
>
>  
>
> Thanks
>
> Darryl
>
>  
>
> *From:*Fabrice Durand [mailto:fd...@in...]
> *Sent:* Thursday, April 27, 2017 8:43 AM
> *To:* pac...@li...
> *Subject:* Re: [PacketFence-users] Captive portal SSL not using
> defined cert after PF7 upgrade
>
>  
>
> Hello Darryl,
>
> haproxy terminate the ssl tunnel, so you need to do something like
> that with your cert:
>
> cat /usr/local/pf/conf/ssl/server.crt
> /usr/local/pf/conf/ssl/server.key > /usr/local/pf/conf/ssl/server.pem
>
> Regards
>
> Fabrice
>
>  
>
>  
>
> Le 2017-04-26 à 21:53, Sokolowski, Darryl a écrit :
>
>     Hi all,
>
>     When on 6.5.1 I had purchased and installed an SSL certificate for
>     the portal and admin.  Installed and updated ssl-certificates.conf
>     and no certificate errors.
>
>     After the upgrade to version 7, ssl-certificates.conf still has
>     the correct certificate referenced, but the portal is using the
>     self-signed certificate instead.
>
>     Admin page does use the correct certificate.
>
>     I checked both
>     /usr/local/pf/conf/httpd.conf.d/ssl-certificates.conf and
>     /usr/local/pf/var/conf/ssl-certificates.conf and both are correct,
>     but incorrect cert used on the portal page.
>
>      
>
>     Anyone know how to make it use the correct certificate now?
>
>      
>
>     Thanks
>
>      
>
>      
>
>     ------------------------------------------------------------------------
>
>
>
>     ------------------------------------------------------------------------------
>
>     Check out the vibrant tech community on one of the world's most
>
>     engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
>
>     _______________________________________________
>
>     PacketFence-users mailing list
>
>     Pac...@li...
>     <mailto:Pac...@li...>
>
>     https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
> -- 
> Fabrice Durand
> fd...@in... <mailto:fd...@in...> ::  +1.514.447.4918 (x135) ::  www.inverse.ca <http://www.inverse.ca>
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org) 
>
>
> ------------------------------------------------------------------------
>
> >>> CONFIDENTIALITY NOTICE <<<
>
> This electronic mail (e-mail) message, including any and/or all
> attachments, is for the sole use of the intended recipient(s), and may
> contain confidential and/or privileged information, pertaining to
> business conducted under the direction and supervision of EarthColor,
> Inc. All e-mail messages, which may have been established as expressed
> views and/or opinions (stated either within the e-mail message or any
> of its attachments), are left to the sole responsibility of that of
> the sender, and are not necessarily attributed to EarthColor, Inc.
> Unauthorized interception, review, use, disclosure or distribution of
> any such information contained within this e-mail message and/or its
> attachment(s), is(are) strictly prohibited. If you are not the
> intended recipient, please contact the sender by replying to this
> e-mail message, along with the destruction of all copies of the
> original e-mail message (along with any attachments).
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> PacketFence-users mailing list
> Pac...@li...
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fd...@in... ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org)