Re: [cobalt-security] Was: SSH Tunneling - Cheap client to use? Now GUI SSL

[Michael Stauber <cobalt@xxxxxxxxxxxxxx>]

Hi Enrique,

> Thank you for the detailed user friendly response! I now understand
> what's going on between the gui and http.

Very good. I'm glad that I could help you.

> Is there an easy set of instructions that I can use to set up port 81 to
> use openssl? Can I somehow use the same openssl program that was
> installed with webmin to do this?

You could use webmin to do that, but it's easier to do it the Cobalt way. The 
procedure for securing the admin interface is even outlined in the RaQ3 and 
RaQ4 manuals, which you can download as PDF from the Cobalt website if you 
don't have the paper version at hand.

But I'll try to explain it in a few words:

- Go to the Admin interface and then click on the green "edit" button next to 
your primary website. It's the only one with the greyed out "delete" button. 

- Click on "SSL-Settings" on the left side of that virtual site's admin 
screen.

- Fill out the fields on that page and supply the information like Country, 
State, Locality and so on.

- Set the pull down menu at the bottom to "generate self signed certificate" 
and click on "save changes".

That's it.

To order a real certificate from Thawte, VeriSign or freessl.org the steps 
are similar. Do the above steps and then copy the lines between (and 
including)...

-----BEGIN CERTIFICATE REQUEST-----
-----END CERTIFICATE REQUEST-----

... in the uneditable field above the text field with the self signed 
certificate. You'll need to submit that information to the certificate 
authority. Based on that certificate request they'll issue you a certificate. 
The issued certificate is then pasted into the text field where you currently 
have your self signed cert, so that the official cert replaces the self 
signed one that you just created.

Then set the pull-down menu to "use manually entered certificate" and click 
on "save changes".

That's it in a nutshell. But as mentioned, you can look it up in the Cobalt 
manuals or in the respective PDF's. In the printed RaQ3 manual it's on the 
pages 98 through 105. In the RaQ4 manual it should be a few pages further 
behind if I'm not mistaken.

-- 

With best regards,

Michael Stauber
SOLARSPEED.NET