This guide provide step-by-step on how to install StartSSL certificate to Webmin so that we can access to the Wemin Control Panel with a signed https address.
- First, if the private key is created by StartSSL and password-protected, we should decrypt it:[bash]openssl rsa -in server.name-ssl.key -out server.name-ssl.key[/bash]
- Combined private keys and certificates to have webmin-compatible pem files:[bash]cat server.name-ssl.key server.name-ssl.crt > server.name.pem
cat ca.pem sub.class1.server.ca.pem >> startSSL_chained.pem[/bash] - Open and edit the /etc/webmin/miniserv.conf and point the SSL information to the above generated pem files (remember to backup this file first so we can go back if there is any problem):[bash]keyfile=/home/ssl-storage/startssl/server.name.pem
extracas=/home/ssl-storage/startssl/startSSL_chained.pem[/bash] - Restart webmin and access https://server.yourdomain.com:10000 to see the green web-address bar 🙂
Notes
- We can use online CSR and private key generator at https://www.gogetssl.com/online-csr-generator/
- We can validate CSR information at https://www.gogetssl.com/online-csr-decoder/
