1

Greetings…

Once again I am having problems renewing a SSL cert on my Spiceworks environment.

I renewed and downloaded my new cert as a Apache server type from Godaddy.

I was told that I could just drop the 2 files (2b308cxxxxxxx and gd_bundle-g2-g1) in the C:\Program Files (x86)\Spiceworks\httpd\ssl directroy then restart Apache and all should be ok since this is just a cert renew. This obviously did not work.

If someone could help me with this I would greatly appreciate it, seems I always have issues with installing SSL certs on my Spiceworks environment. I have read all the supporting documents online, however, due to my knowledge of SSL certs I am very confused.

If you need more information please let me know as my server is not working properly and need to get this resolved ASAP.

thanks!

marc

3 Spice ups
2

Have you read through this How-To?

http://community.spiceworks.com/how_to/show/3310-how-to-install-an-existing-ssl-certificate

Or this one:

http://community.spiceworks.com/how_to/show/1490-how-to-secure-your-spiceworks-installation-using-ssl

Or even this one:

http://community.spiceworks.com/how_to/show/2754-setup-spiceworks-to-use-a-generated-ssl-cert

3

Yes I have, per my original post I pretty much have read the supporting documents online.

My confusion is, do I need to go through the generating a new CSR, in other words do i start all over from scratch if i am just renewing a cert that has expired?

If I had a step by step instructions on how to renew the cert on a windows 7 box that would great. I am very sure its easier than it seems.

marc

4

update

The files we downloaded CRT files (Apache server type), do we need to generate a PEM file from the original download files.

And if so what procedure to convert the files?

Please keep this is mind that this is a Windows 7 box and not running IIS.

Thanks in advance for any help.

Marc

5

Yep, .pem files are the way to go most of the time.

I’d suggest (mentally) working through the steps in this how-to:

https://community.spiceworks.com/how_to/show/3267-create-new-public-ssl-certificate-for-spiceworks

Aaron M spent a lot of time putting that together, and we’ve seen it work time and time again.From the sounds of it, you can skip to step 5.5-ish and go from there.

GoDaddy certs are particularly troublesome because they generally come with a bundle cert that can muck things up.

6

Thanks Matt!

The only confusion we have at this point is what files to rename? We downloaded (2) files in a zip format that are both CRT files, (2b308cxxxxxxx.crt and gd_bundle-g2-g1.crt).

The Apache server on Windows platform requires PEM files.

Do we need to generate a PEM file, or did we download the wrong files type i.e crt’s?

thank for your help!

Marc

7

IIRC, the one that is not the bundle should do it. I’ll have a look through my notes, as it has been a little while since I’ve done one of these.

8

Nope, looks like it’s .pem all the way down. Take a look here:

http://community.spiceworks.com/topic/post/780123

Particularly the last couple of lines.