Need Help Enabling SSL for my DOLIWAMP Dolibarr (10.0.0.2)

Hello.

I have an existing doliwamp installation of dolibarr 10.0.0.2.

I previously had this configured to use SSL/https, but I recently had a data loss, and had to restore my installation, and I cannot remember how I got it to work.

So, I have been using this page (SSL/TLS Certificate Installation Guide: Apache for Windows) as a guide. However, obviously I am on windows.

I know that it is necessary to modify the conf file in apache to make this work.

I have already made the necessary modifications so that it does not require a localhost connection to connect (networked clients may now connect via http)

I set the servername entry to correspond with my server’s DNS entry.

I have placed the SSL certificate.crt file, the ca-bundle_client.crt file, and the private .KEY file in the root directory of the doliwamp installation.

I have linked the private .key file to the SSLCertificateKeyFile entry in the httpd.conf file, and the SSL certificate.crt file to the SSLCertificateFile entry and made sure these entries are not commented. I have not linked the ca-bundle_client.crt file to anything as I am unsure which entry to link it to.

Lastly, I have uncommented the lines:
Loadmodule ssl_module modules/mod_ssl.so
Include conf/extra/httpd-default.conf

as was mentioned in the guide.

However, after making these changes and restarting the doliwamp services, it seems that the apache server does not start, and therefore I cannot access dolibarr.

Hello,

May be have a look on /logs/apache-error.log to understand why apache doesn’t want to start.

Thanks! That really helped me out; it seems my .crt file and private key do not match

Well… while that was definitely part of the problem, but I’m afraid we have a little more to go here. Let me give you the full information. I learned of the key mismatch from apache_error_SSL.log which was generated at some point during my earlier attempts.

After correcting this mistake, I cleared out the logs, and attempted to restart the services. However, right now, not only does apache not start, but no log information is being generated, either. I am stumped.

EDIT:
I have found the solution.

The procedure is as follows:

  1. Stop all doliwamp services.

  2. Copy the correct certificate and key into the root directory. (there is a default keys and cert here, too)

  3. Edit httpd.conf entries for SSLCertificateKeyFile and SSLCertificateFile.

  4. Uncomment the lines:
    Loadmodule ssl_module modules/mod_ssl.so
    Include conf/extra/httpd-default.conf

  5. Restart doliwamp services.

MAKE NO OTHER CHANGES! I was making a few other changes here and there, adding listen ports and specifying server addresses and such - none of this was necessary.

1 Like