Web Hosting Talk







View Full Version : Here's a new oddity involving SSL on our RaQ4i


JoeM
05-14-2001, 04:43 PM
Using a self-signed certificate on a RaQ4i.

Internet Explorer behaves as one would expect (showing the warning that says something like, "this page is secure but it is from a source other than the trusted sources in your list" Then the browser will finally display the proper web page in the secure environment.

However, in Netscape (4.7), after walking through the "New Site Certificate... " screens, upon clicking the Finish button the browser window fills with the raw html text, of the page that should display.


Does this ring a bell? Happened to anyone before?
Thanks much.

afriq
05-14-2001, 05:17 PM
Hi there,

I've done the same (installed a self-signed certificate) - and ever since I can no longer access the control panel pages ...

This is what the browser returns:

-------
The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------

Question - how on earth do I disable the certificate?!?!

Thanks,

Johan

JoeM
05-14-2001, 11:15 PM
Just go to the RaQs control panel, then to the SSL functions of the account and select delete certificate.

Jason_Berresford
05-15-2001, 12:32 AM
It is possible that the admin server has crashed, if that is the case goto your telnet and log into your server.

Type:
su
enter Password

cd /etc/rc.d/init.d
./admserv restart
./httpd restart

That should do the trick, if any error messages are displayed, please post them here.

JoeM
05-18-2001, 03:06 AM
Thanks for the help. I think I have everything set up correctly at this point, EXCEPT, AND AND EVERY entry into the Cobalt control panel flips the browser into secure SSL mode (even if you don't type https:...).

The problem is, when one of our hosted customers tries to access their control panel they also get fliped into SSL, PLUS they get the warning that the name on the certificate does not match the name of their domain.

I have never encountered a forced SSL situation when entering the control panel area of a web account. Not with any server on Alabanza, not with any server at VDI, not at Verio, no where.

The people at RackShack are telling me this is the way Cobalt servers work. Is this true?

iplexx
05-19-2001, 06:25 AM
yes, it's the way the cobalt works.

if you're main site has SSL enabled, admin server forces administration pages to be called by a secure connection.

however, i wouldn't consider it at a problem. we tell our costumers it's for their security when we force SSL on vsite administration. they shouldn't worry about the warning, as a real and expensive certificate isn't really needed, and the only important thing is that the connection is encrypted by SSL and they don't have to pay an extra versign certificate. ;)

if you really want to remove ssl from the control panel you simple have to remove/disable SSL on the main server account.

___________
Martin/Iplexx

JoeM
05-19-2001, 04:43 PM
Thanks for the verification. Actually I just now found a solution to the problem, at least as far as a way for our hosted accounts to access their control panels without incurring the security warning. It's a longer address that goes like this:

http://www.host.com:80/.cobalt/siteManage/www.hostcustomer.com/