Avatar of SooHow Cheng
SooHow Cheng
Flag for Singapore asked on

How to renew SSL Cert for webmin?

This is using webmin. We are using this linux application for postfix email, apache web, and some others. Now, the ssl cert is going to be expired in a week's time.


 Another question is why the https://192.168.1.246:10101 webmin url can not be access? Does this have to be configure on Apache?


We have renew the certificate with Alpha. What would be the steps to renew the ssl cert.?


Thanks in advance

Linux* webminSSL / HTTPS* ssl cert

Avatar of undefined
Last Comment
David Favor

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
David Favor

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
arnold

Is it using a public certificate or a self signed one?


You are accessing the portal by IP and using chrome, the message is that the URL you are accessing is not secure meaning no certificate. Do you need to have the site behind a certificate?
use a different browser.

You may have your setup configured to auto-redirect to .....
Yujin Boby

Since the SSL is for the domain name, use the domain name instead of IP to login to webmin.

 https://your-domain-here:10101

To install SSL, first purchase SSL from any SSL provider (ssls.com/namecheap.com/godaddy.com etc..). Once you have SSL, you can update SSL in webmin, click on "Update Certificate and key" link to install your new SSL certificate and its private key.



You can also use the free LetsEncrypt SSL certificate, which is tab before the last tab. It is a free 90 day SSL, Webmin will auto-renew the SSL if the website is public. Installing paid SSL may be better as you don't have to worry about renewal failing due to some technical issue.

SooHow Cheng

ASKER
Hi all,

Give me sometime to digest. I will get back to you later.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
David Favor

As @Yujin mentioned, just use your normal hostname for connections + renewals... all should be well...

As there's no way Apache can connect to a 192.168.X.X (well... with public connections...) so some hostname must be being used, along with some Dark Necromancy to allow you access to a public site with a non-routable/private 192.168.X.X IP address.
SooHow Cheng

ASKER
Hi all,

There is a must simple way to renew the ssl cert, I will post it later.
David Favor

Certs are dirt simple to renew... well... depending on the cert...

If you're truly covering a LAN IP, rather than a public IP, then you'll renew your cert based on the untrusted (Private CA) cert you generated initially.

How you renew your cert will be based on how you generated your cert.

Only you know how this occurred...
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
SooHow Cheng

ASKER
Dear David,

We didn't renew via the webmin URL.
We used the openssl to do the create the csr, and follow up actions. The objective is the same as getting it renewed via URL.
SooHow Cheng

ASKER
Thanks for both experts guided me to the correct direction. The ssl cert is finally renewed successfully.
David Favor

You're welcome!
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes