Menu
▾
▴
Re: [PacketFence-users] Captive portal SSL not using defined cert after PF7 upgrade
|
From: Virginie G. <vir...@ut...> - 2017-04-28 13:33:50
|
Hello, I am exactly in the same case. Here is the content of /usr/local/pf/conf/httpd.conf.d/ssl-certificates.conf : /# Apache SSL certificates configuration// //# This file is manipulated on PacketFence's startup before being given to Apache// //SSLCertificateFile %%install_dir%%/conf/ssl/certif_ut-capitole_fr.crt// //SSLCertificateKeyFile %%install_dir%%/conf/ssl/cle_ut-capitole_fr.key// //SSLCertificateChainFile %%install_dir%%/conf/ssl/cachain_digicert.pem// / I follow your advice : cat certif_ut-capitole_fr.crt cle_ut-capitole_fr.key certif2_ut-capitole_fr.pem But where must "certif2_ut-capitole_fr.pem" be used ? Which config file ? Thanks Virginie Girou Equipe systeme DSI - UT1 Capitole Tel : +33 (0)5.61.63.39.19 Le 28/04/2017 14:52, Fabrice Durand a écrit : > > Hello Darryl, > > what did you do exactly ? > > Regards > > Fabrice > > > > Le 2017-04-27 à 12:06, Sokolowski, Darryl a écrit : >> >> Thanks Fabrice, >> >> I concatenated my server certificate and server key as suggested and >> restarted pf, but unfortunately when I access the portal page, I am >> still getting the certificate issued by/to 127.0.0.1 instead of my >> Comodo certificate. >> >> If it helps, my ssl-certificates.conf file looks like: >> >> SSLCertificateFile /usr/local/pf/conf/ssl/star_mydomain_com_SHA2.pem >> >> SSLCertificateKeyFile /usr/local/pf/conf/ssl/star_mydomain_com_SHA2.key >> >> SSLCertificateChainFile /usr/local/pf/conf/ssl/ComodoCA_SHA2.bundle >> >> Thanks >> >> Darryl >> >> *From:*Fabrice Durand [mailto:fd...@in...] >> *Sent:* Thursday, April 27, 2017 8:43 AM >> *To:* pac...@li... >> *Subject:* Re: [PacketFence-users] Captive portal SSL not using >> defined cert after PF7 upgrade >> >> Hello Darryl, >> >> haproxy terminate the ssl tunnel, so you need to do something like >> that with your cert: >> >> cat /usr/local/pf/conf/ssl/server.crt >> /usr/local/pf/conf/ssl/server.key > /usr/local/pf/conf/ssl/server.pem >> >> Regards >> >> Fabrice >> >> Le 2017-04-26 à 21:53, Sokolowski, Darryl a écrit : >> >> Hi all, >> >> When on 6.5.1 I had purchased and installed an SSL certificate >> for the portal and admin. Installed and updated >> ssl-certificates.conf and no certificate errors. >> >> After the upgrade to version 7, ssl-certificates.conf still has >> the correct certificate referenced, but the portal is using the >> self-signed certificate instead. >> >> Admin page does use the correct certificate. >> >> I checked both >> /usr/local/pf/conf/httpd.conf.d/ssl-certificates.conf and >> /usr/local/pf/var/conf/ssl-certificates.conf and both are >> correct, but incorrect cert used on the portal page. >> >> Anyone know how to make it use the correct certificate now? >> >> Thanks >> >> ------------------------------------------------------------------------ >> >> >> >> ------------------------------------------------------------------------------ >> >> Check out the vibrant tech community on one of the world's most >> >> engaging tech sites, Slashdot.org!http://sdm.link/slashdot >> >> >> >> >> _______________________________________________ >> >> PacketFence-users mailing list >> >> Pac...@li... <mailto:Pac...@li...> >> >> https://lists.sourceforge.net/lists/listinfo/packetfence-users >> >> >> >> -- >> Fabrice Durand >> fd...@in... <mailto:fd...@in...> :: +1.514.447.4918 (x135) ::www.inverse.ca <http://www.inverse.ca> >> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org) >> >> >> ------------------------------------------------------------------------ >> >> >>> CONFIDENTIALITY NOTICE <<< >> >> This electronic mail (e-mail) message, including any and/or all >> attachments, is for the sole use of the intended recipient(s), and >> may contain confidential and/or privileged information, pertaining to >> business conducted under the direction and supervision of EarthColor, >> Inc. All e-mail messages, which may have been established as >> expressed views and/or opinions (stated either within the e-mail >> message or any of its attachments), are left to the sole >> responsibility of that of the sender, and are not necessarily >> attributed to EarthColor, Inc. Unauthorized interception, review, >> use, disclosure or distribution of any such information contained >> within this e-mail message and/or its attachment(s), is(are) strictly >> prohibited. If you are not the intended recipient, please contact the >> sender by replying to this e-mail message, along with the destruction >> of all copies of the original e-mail message (along with any >> attachments). >> >> >> ------------------------------------------------------------------------------ >> Check out the vibrant tech community on one of the world's most >> engaging tech sites, Slashdot.org!http://sdm.link/slashdot >> >> >> _______________________________________________ >> PacketFence-users mailing list >> Pac...@li... >> https://lists.sourceforge.net/lists/listinfo/packetfence-users > > -- > Fabrice Durand > fd...@in... :: +1.514.447.4918 (x135) ::www.inverse.ca > Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org) > !DSPAM:67760,59033b93169611549091587! > > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > > !DSPAM:67760,59033b93169611549091587! > > > _______________________________________________ > PacketFence-users mailing list > Pac...@li... > https://lists.sourceforge.net/lists/listinfo/packetfence-users > > > !DSPAM:67760,59033b93169611549091587! |
