Re: [cobalt-users] [Raq3] Need help with hostname, GUI , SSL

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Liz wrote:

> Here's the problem.
> 
> My provider setup my RaQ3 so my server's hostname is "ns1.domain.net".
> 
> They were suppose to setup the main server name to "www.domain.com" since
> this was the digitial certificate they were informed that I was going to
> apply for.

I NEVER set up a site for the RaQ's hostname.  I use it (and it's
associated IP#) strictly for my own shell, ftp and browser-based logins.

All my sites are virtual sites.

> For what I know so far, the hostname is the main name of the server that
> uses the directory /home/sites/home/web/.  But when I try to use the GUI in
> SSL mode for https://www.domain.com/admin/  the browser warns me that I'm
> about to enter unsecure pages, click OK, entered access info, and then the
> GUI is now in unsecure mode.
> Not good!

I guess I'm not understanding why you can't set up a virtual site for
www.domain.com and put the cert there.

> According to the RaQ3 manual (for whatever it's worth) in order for the
> hostname to run secure it needs SSL enabled for that site, but since the
> site is "ns1.domain.net" and my certificate is isued for "www.domain.com"
> so now we're talking apples and oranges.
> Who buys a certificate for their name server???? (shrug!!!)

Is this because you want your cert to protect your use of the RaQ's
web-based gui interface? If so, then you need to have www as your main
system hostname, since that's what the cert is already for.

> In addition, not all Miva Merchant's admin files for "www.domain.com" run
> in SSL mode either, although the same for other virtual sites with SSL
> enabled for their sites run ok with their Miva admin files.  Makes sense to
> me!

Another reason to use all virtual sites.

> Of course I asked my provider for support on this hostname SSL problem --
> their answer was for me to call Cobalt and "hire" Cobalt's support
> staff.  What a great answer, although it's the WRONG answer.   Provider
> claims they "offers you the best pricing and support on Cobalt RaQ Servers
> in the industry"  Yeah, I think we all heard THAT one before.  Also tried
> the archives, but nothing referrancing RaQ3s comes up.  Lots of RaQ2s and
> Qubes info althought don't know if any of those threads would apply to the
> RaQ3.

If you told them to set it up with www as the hostname and they didn't,
then why not just hire Cobalt (or me), pay for it, and sue the
provider.  They'd lose if they really did it wrong and won't fix it. 
But of course you'd have to prove it <frown>, and you may not be able to
do that if you haven't saved a lot of documetation.

> Is there a way to "safely" manually change specific files as to change the
> hostname to www.domain.com , make ns1.domain.net a virtual site, keep name
> server info same so no vsites are affected, and yet have the GUI understand
> all these changes?
> 
> Attempted to do this in GUI,  No can do since the hostname entry doesn't
> offer option to change the hostname..no "boxes" to type in.

I can do it from the gui.  Just click on the underscored hostname.  It
works for me; I tried it once already.  If you can, I can do it for you,
but I don't log onto boxes unless I'm being paid as a consultant; the
liability issues are too great otherwise.

Of course paying me won't cost much less than buying a new cert <frown>.

> Here's an example of the current IPs and site paths:
> ns1.domain.net  -  111.22.333.111  - /home/sites/home/ (has pointer to
> www.domain.com)
> ns2.domain.net  - 111.22.333.112 - /home/sites/site2/
> www.domain.com - 111.22.333.113 - /home/sites/site1/

Believe me, it's doable.  And you can do it yourself.  If you don't know
where to click, call me and I'll work through it with you on the phone.

> PS:  Anyone write that "Cobalt RaQs for Dummies" book yet?

I'm actually considering it.  But I don't think IDG Books wouldn't
publish it unless Cobalt would release sales figures, and they were high
enough.  Not even 10% of users will buy the book.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205