Trying to set up SSL with certificate for a hosted site on a server that has a single IP address. Followed instructions in SSL.txt.

Initially created /var/aegir/config/server_master/nginx/pre.d/extra_ip_ssl.conf and replaced IP addresses with the server's IP address, and the domain with the name of the actual domain. Copied CRT and KEY files to the appropriate locations. Restarted nginx.

Result: whereas previously the certificate was showing as untrusted with certificator of the Aegir server domain, it now showed the domain of the hosted site as the certificate issuer, but with no deeper authority for some reason.

Second attempt, I created the /var/aegir/config/server_master/nginx/pre.d/extra_ip.conf file and populated appropriately. On nginx restart this caused permanent 502 bad gateway error, perhaps unsurprisingly.

Advice on what's going wrong would be appreciated. This links in to the issues at http://drupal.org/node/2000716 and http://drupal.org/node/1994000. Thanks in advance. :(

Comments

omega8cc’s picture

omega8cc commented
Status: Active » Closed (works as designed)

The SSL how-to says clearly that it is for *extra* IP addresses. If you have only a single IP address, the how-to doesn't apply and you should remove extra created Nginx config files.

Then please read this and simply replace the contents of the default key and cert files with your own and reload Nginx. Your own cert file must include your domain cert plus any intermediate certs pasted below it.

That should be it.