[Answered] Startssl Installation

[lwk]

When I activate the SSL Host for the www.usa.iso-50001.info, a message shows as below:

 

Error from ssl wrapper: Unable to produce a valid Apache configuration file.

 

 

I installed a self-sign SSL for www.fbw.iso-50001.info, the result is same.

 

 

Thanks.

[Krydos]

Does this help?

 

1. Go to http://stevie.heliohost.org:2082/frontend/x3/ssl/csrs.html
   
2. Select your domain from the dropdown box (if you have multiple domains.)
   
3. Fill out country, state, city, company, company division, email, and passphrase for your business or self, not the server. If some of the fields don't really apply, like company division, just put website or something generic.
   
4. Click generate and you should get two big boxes with all sorts of random letters and numbers.
   
5. Copy paste the first box that starts with -----BEGIN CERTIFICATE REQUEST-----
   
6. Go to whatever website you're purchasing your SSL certificate from. For instance you can do a 90 free SSL certificate from comodo.com as a trial. http://ssl.comodo.com/free-ssl-certificate.php
   
7. (From here on out I will walk you through setting up a free 90 day certificate from Comodo. Other certificate providers will be similar.)
   
8. Copy from your cPanel tab the CSR and paste it into the website from --BEGIN CERT to --END CERT.
   
9. "Select the server software used to generate the CSR" is WHM/cPanel.
   
10. Fill out the rest of the options, and then click "Next."
    
11. Now they will want to verify that you own the domain you are trying to set up SSL on. The easiest way is to look at the email addresses they have listed and then verify that they are created with this link http://stevie.heliohost.org:2082/frontend/x3/mail/pops.html
    
12. If the email address is created and tested select it from the list, and click continue.
    
13. Now you get to fill out some more information. Some of the fields should be autopopulated from what you typed in earlier. Additional required fields are address, zipcode, etc. If your company has an office use that, otherwise your home address. Fill out all their required information and click next.
    
14. If there aren't any problems with your data you should no arrive at their terms of use agreement. Click accept (if you accept) and continue to payment information.
    
15. If you're doing the free trial the total should be $0 otherwise enter payment information to pay for your certificate. Continue to the next steps.
    
16. Check the email address you selected earlier, and you should receive an email to validate that you own the domain. Type the code into their link.
    
17. Once you have passed validation they will email you a file called yourdomain.crt to your contact email address that you typed in way up in step 3 (unless you changed it somewhere along the line) not necessarily to the same validation email address that you just used.
    
18. (From here on the steps should be the same no matter if you're using a free certificate, or which company you purchased from.)
    
19. Open up http://stevie.heliohost.org:2082/frontend/x3/ssl/crts.html
    
20. In the email copy from --BEGIN CERT to --END CERT and paste that into the big box labeled "Paste the crt below" then click upload.
    
21. Now your cPanel has all the required components to setup SSL, but it still hasn't been installed. Go to http://stevie.heliohost.org:2082/frontend/x3/ssl/install.html
    
22. Once again select your domain from the dropdown box (if you have more than one) and it should auto-populate the three big boxes below with the correct information. I like to manually verify the first few characters of each box to make sure it isn't coming up with weird random data.
    
23. If everything looks good scroll to the bottom and click "Install certificate."
    
24. Wait patiently while the SSL is installed. It can take a few minutes.
    

If this is what you already did, or if you follow these steps and the certificate still won't install properly feel free to PM me the .crt, .key, and the .ca text blocks and I can install it for you. If you do decide to send me a PM please make sure you post on this thread letting me know about the PM because otherwise I will never remember to check for new messages. Good luck!

[lwk]

Dear Krydos,

I've sent a PM to you about the information of SSL installation. Thanks!

[Krydos]

Oh, you sure did.

Success!

Certificate verification passed

The Certificate for the domain usa.iso-50001.info was installed on the IP 216.218.228.91. 
Finished SSL Install Process for usa.iso-50001.info (www.usa.iso-50001.info).