[ASK] Cara Pasang PositiveSSL dari NameCheap

[GentZu]

sayang iseng2 masu nyobain install PositiveSSL di domain.com (bukan untuk panel)
di namecheap di suruh select webserver, pilihannnya ada: apache + openssl, nginx, apace + mod sll dll
itu kalau pakek kloxomr 7 hiawathaproxy milihnya yg apa?
terus yg bingung lagi di suruh masukkan csr key, itu ambilnya dr mana?

Code: [Select]

Important: Please use CSR code with 2048-bit private key to activate your SSL certificate. According to modern security standards using CSR codes with private key size less than 2048 bits is not allowed.
Note: If an SSL certificate is being issued for an IDN (Internationalized Domain Name), a "common name" field of a CSR must be a punycode of the domain (also known as ASCII compatible encoding, or ACE) e.g. xn--aussergewhnliches-7zb.com. Including common name in native characters will result in an error.
saya sudah search gk ada tutorial yg pas untuk di pahami
thanks

[MRatWork]

informasikan nama-nama file dari PositiveSSL itu.

[GentZu]

CSRnya sudah sy dp dr add manusl ssl cert di panel
ini dp zip lewat email:
Root CA Certificate - AddTrustExternalCARoot.crt
Intermediate CA Certificate - COMODORSAAddTrustCA.crt
Intermediate CA Certificate - COMODORSADomainValidationSecureServerCA.crt
Your PositiveSSL Certificate - domain_net.crt

oh iya saya ingin di pakek pada www.domain.net

[MRatWork]

Lah kok semua extension .crt?.

Secara prinsip ada 3 file ssl yang diperlukan yaitu .key, csr dan .ca. Gabungan dari .key dan .csr adalah .pem. Jika anda ambil ssl dari provider ssl maka akan ada .ca. Secara umum website cukup memerlukan .key dan .pem dalam di web configs-nya.

[GentZu]

kalau beli di namecheap memang seperti itu
saya sudah lakukan cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt > domain_net.ca-bundle untuk mendapaktan CA-nya

tadi saya upload file.key dr bikin manual add ssl certficate di panel domain
terus upload file domain_net.crt dan domain_net.ca-bundle pas di celanup error

*** Restart services - BEGIN ***

Stopping mysqld:                                           [  OK  ]
Starting mysqld:                                           [  OK  ]
-------------------------------------------------------------------

Stopping named: .                                          [  OK  ]
Starting named:                                            [  OK  ]
-------------------------------------------------------------------

Stopping httpd:                                            [FAILED]
Starting httpd:                                            [FAILED]
-------------------------------------------------------------------

Stopping Hiawatha web server:                              [FAILED]
Starting Hiawatha web server: Error loading X.509 CA certificate (-0x2180): X509 - The CRT/CRL/R format is invalid, e.g. different type expected
                                                           [FAILED]
-------------------------------------------------------------------

Restarting qmail:
* Stopping qmail-smtpd.
* Sending qmail-send SIGTERM and restarting.
* Restarting qmail-smtpd.
-------------------------------------------------------------------

Stopping xinetd:                                           [  OK  ]
Starting xinetd:                                           [  OK  ]
-------------------------------------------------------------------

Execute fixlxphpexe for php53s...
Stopping kloxo-phpcgi:                                     [  OK  ]
Starting kloxo-phpcgi:                                     [  OK  ]
Stopping kloxo-hiawatha:                                   [  OK  ]
Starting kloxo-hiawatha:                                   [  OK  ]
-------------------------------------------------------------------

Stopping php-fpm:                                          [  OK  ]
Starting php-fpm:                                          [  OK  ]
-------------------------------------------------------------------

Shutting down system logger:                               [  OK  ]
Starting system logger:                                    [  OK  ]
-------------------------------------------------------------------

[MRatWork]

Tanyakan saja bagaimana cara pasang ssl di apache?. Dari jawabannya bisa ditindaklanjuti.

[GentZu]

saya baca referensinya dr sini
http://forum.mratwork.com/indonesia-users/(ask)-dedicated-ip-untuk-ssl-selalu-gagal/
http://forum.mratwork.com/indonesia-users/bagaimana-cara-install-ssl-di-kloxo-mr/
http://www.devside.net/wamp-server/installing-comodo-positivessl-certificate-bundled-with-root-and-intermediate-ca-certificates-on-apache

[GentZu]

ternyata setelah pakek nginx proxy gk ada masalah, kalau hiawatha proxy pas restart http(s) in use [FAILED]
mungkin ada solusi pak?