How can I reset the SSL certificate for aaPanel port access? I am requesting certificates through Let's Encrypt. One solution suggests disabling SSL during the process. However, access credentials would be exposed in plain text. Is a more secure solution available to reset SSL settings for aaPanel, without any access that is insecure?

Hello, you can set up the Panel SSL configuration via the settings interface Let's Encrypt and access the panel using the SSL certificate validation domain name. No binding domain required brainchild

aaPanel_Kern How can the interface be accessed securely (without leaking credentials, or other secrets, in plaintext), when a certificate is not currently installed?

Hello, The panel uses self-signed certificates by default You can enable SSL certificate access using bt 27 and access using https brainchild

aaPanel_Kern If the current certificate, issued by an authority, is disabled, will aaPanel revert automatically to using a self-signed certificate, until a new certificate is installed?

No, you need to do it yourself, you can use bt 27 to use a self-signed certificate

aaPanel_Kern Would it be possible to reset the certificate, without any insecure access, by the following steps?: Remove the current certificate (issued by an authority) through the web interface. Open a secure shell, to execute bt 27 . Return to the web interface, accepting the self-signed certificate. Through the web interface, install a new certificate. Perhaps step (1) is unnecessary.

aaPanel_Kern After I execute bt 27 , the browser is not successfully receiving a self-signed certificate. Various web browsers all fail, reporting slightly different messages. In Firefox, the message reads... An error occurred during a connection to aapanel.mydomain.com:1234. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG Fortunately, I can restore the previous certificate, by executing the same command again. I believe the system is now in the same state as originally.

aaPanel_Kern Do you have any suggestions for switching successfully to using a self-signed certificate? Presently, I can restore the certificate previously installed, issued from an authority, but it will expire soon. I need to request a new certificate, which requires disabling the certificate, while accessing the interface successfully with a self-signed certificate.

Hello, It is recommended that you use a new subdomain dedicated panel and use file verification to apply for SSL. Certificates below 30 days will automatically apply for renewal. brainchild

Reseting SSL certificate for aaPanel portal, without any insecure access

aaPanel_Kern

brainchild
Yes, bt 27

brainchild

aaPanel_Kern

Let me confirm.

Presently, I have secure access through the certificate issued by the authority.

Now, I will

Delete all files in /www/server/panel/ssl.
Execute bt 27.
Attempt access to the interface, from the remote browser, with the self-signed certificate.
If unsuccessful, again execute bt 27, to revert to use of the certificate issued by the authority.

It is important that I can avoid degrading functionality further. At least for the moment, I do have secure access to the interface.

aaPanel_Kern

yes

brainchild

aaPanel_Kern

After deleting the files and executing bt 27, the interface is again inaccessible, with the same problem as reported earlier, about the invalid certificate.

It is also not possible to restore access simply by repeating the same command. It was necessary to restore the deleted files from a backup location.

brainchild

aaPanel_Kern

Do you have any suggestion for trying to generate the self-signed certificate properly?

Deleting the files in the directory, as suggested, makes no difference. The directory is not even ever repopulated with new files. Restoring previous function depends on restoring the files in the directory from a backup location.

I hope it is possible to resolve the issue. Thank you.

aaPanel_Kern

Hello,
We recommend that you provide more information and we recommend that you directly replace the corresponding certificate content.

brainchild

aaPanel_Kern

Which information should I provide?

How do I replace the content?

aaPanel_Kern

brainchild

aaPanel_Kern

"Install Certificate Now" has had no effect, other than to make the interface inaccessible for a few moments. The same certificate continues to be provided, which is expiring soon, and has not been yet renewed successfully.

Are you asking me for screenshots? Please clarify.

aaPanel_Kern

Please check if the certificate you configured is valid? The configuration certificate will restart the panel and need to wait for a while before accessing it

brainchild

aaPanel_Kern

As i explained, after I invoke the button, the panel seems to restart, but otherwise there is no change. The certificate is still the same one expiring soon.

aaPanel_Kern

Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:
Detailed problem description:

No post link will not be able to know which user's information is, and the problem will not be processed

brainchild

aaPanel_Kern

I cannot provide identifying information about the host or deployment.

aaPanel_Kern

It is recommended that you modify the file directly

brainchild

aaPanel_Kern

Which file is recommended to be modified?

aaPanel_Kern

nginx format content
/www/server/panel/ssl/certificate.pem
/www/server/panel/ssl/privateKey.pem

brainchild

aaPanel_Kern

Would you please explain the modifications?

aaPanel_Kern

Key == /www/server/panel/ssl/privateKey.pem
Certificate == /www/server/panel/ssl/certificate.pem
We recommend that you back up. And do it manually. and understand the file name

brainchild

aaPanel_Kern

I have checked the certificate and private key shown in three different locations: the configuration for the web site (subdomain), the settings for aaPanel, and the files you mentioned.

I have discovered that the certificate seems to match for all three, but in each case, the key is different.

Please suggest exactly the process you recommend for changing the host and aaPanel to operate correctly.

aaPanel_Kern

This is not possible to provide a corresponding solution.
We recommend that you provide screenshots, are you using nginx or apache?
We recommend that you provide more information, we have been spending a long time here, aren’t we?
If it cannot be resolved, it is recommended that you use a self-signed certificate.

brainchild

aaPanel_Kern

I am sorry for taking your time.

I believe the problem is now solved.

In case a wildcard certificate conflicts with a non-wildcard certificate, for the domain of aaPanel, the wildcard certificate is selected.

I hoped that the certificate for the aaPanel could be different from the certificate for the wildcard, but it as an adequate solution that both share the same certificate.

Previously, I had not managed any secure access through aaPanel settings, only through the management of the domain.

My I ask, when the domain certificate is renewed, is it automatically applied for access to aaPanel?

Thank you for your time. I appreciate your assistance.

« Previous Page Next Page »