Error generating CSR for SLL certificate

[talon39]

I am trying to generate a Certificate Request and Key for one of my customers in WHM. When I submit it I get the following error:

Can't get vars ... did you forget one of them ? at /scripts/gencrt line 35, line 23.

 

[jphilipson]

did you fill in all the fields on the form? .. and try updating cpanel. and trying again.

 

[Kikky]

Originally posted by talon39
I am trying to generate a Certificate Request and Key for one of my customers in WHM. When I submit it I get the following error:

Can't get vars ... did you forget one of them ? at /scripts/gencrt line 35, line 23.

Make sure you only enter a '2' character country code and try again. I made this mistake first time i used it because i didn't read the bugger heh.

 

[talon39]

I filled out the form completely. I used US for the country code. The support at my Dedicated Hosting company said the problem is caused because the site I am creating it for uses a shared IP. I guess SSL requires a Dedicated IP? However that doesn't seem to be indicated by the error.

 

[Kikky]

You can only have 1 instance of SSL running on 1 IP yes.. so you can have 1 ssl host running on ip:443.. virtually used, or not.

I run one of mine on the main shared IP, but if i needed anymore ssl hosts, they'd have to go on another free IP ( and that's just because you there's no faclilitation for sharing the port w/ssl like http for example, which can use headers and other good stuff. )

Hope that helps you abit more

 

[talon39]

If I assign it a dedicated IP from those I have through WHM, will I need to do anything else? at the registrar for example.

 

[Kikky]

Nope.

It'll just install the ssl-httpd host for whichever domain/fqdn you've set the certificate up for:

https://secure.blah.com or https://blah.com, whichever FQDN you've chosen of course.

This assumes that you're hosting the site already, in which case, you don't need to do anything at the registrar.

Here's the motions you need to do:

#1 Setup the account you want to use SSL on, if you haven't already. Let's say we're going to use a subdomain secure.blah.com

#2 Generate the certificate signing request for secure.blah.com ( backup the private key which is mailed out to you from your server, too )

#3 Sign up for your certificate. Once you've got it, follow these very few simple steps to install.

- clicky on install ssl certificate / setup host
- slap the ssl certificate you've just recieved in there
- click go
- badabing - https://secure.blah.com is now setup on that IP address.

More Detailed install instructions: http://www.freessl.com/resources/install/chainedssl/cpanel.htm

 

[talon39]

No I mean one step before all of that. I currently have her account setup in WHM with my server's shared IP. Her domain is using the nameservers assigned to that IP. Before I can generate a CSR for the certificate I have to change her IP address. I can assign a new IP from one of the others I'm not using through WHM. But I'm afraid if I do that, her domain will no longer work. Will everything just propagate and work if I change her IP? Or will I have to create new nameservers for it or something like that?

Sorry this is my first time doing this.

 

[Kikky]

If you're not hosting the zone that is authorative for the domain ( in other words, you're not hosting the DNS for the domain.. she has it using someone else's nameservers ) then you will need to update the records for her new IP @ whichever nameservers she has it pointing to.

 

[talon39]

She is using my namesevers. So do I need to do anything else besides assign the new IP? Do I need to edit her DNS info or something?

 

[easyhoster1]

Yes, you need to update the zone and the apache httpd.conf file with the new IP#