FR EN
leafleaf
Updated on September 12, 2024

TUTORIAL: Add an SSL certificate in PBXware

Estimated reading: 4 minutes

An SSL certificate is an electronic certificate that authenticates the identity of a website and enables an encrypted connection. SSL stands for "Secure Sockets Layer", a security protocol that creates an encrypted link between a web server and a web browser.

With PBXware, you can either:

  • Use Let's Encrypt to generate a certificate automatically
  • Import your own certificate

Prerequisites

The certificate installation process takes place in the PBXware configuration interface (:81).

You must therefore have your root password.

Use a Let's Encrypt certificate

This step is the most frequently used, notably for its ease of execution. Let's Encrypt is a free, automated, and open certificate authority, used to configure an HTTPS server and have it automatically obtain a trusted certificate, without any human intervention (for more information: https://letsencrypt.org/). This means that you will only need to install the certificate once, and it will be automatically renewed when it is about to expire. When the SSL certificate is about to expire, PBXware and the Let's encrypt service will automatically renew the certificate every 90 days without any action needed. You must mandatorilyconnect to the administration interface (:81) with the domain name connected to your PBXware, not to a public IP address, for example.

After a few seconds, a message informs you that the SSL certificate has been successfully installed and you then have nothing else to do.

Import your own SSL certificate

It is possible to create and import your own certificate, or to use Let's Encrypt, a free certificate authority.

Access your configuration wizard [IP_ADDRESS]:81 or mypbx.com:81

Example: http://212.86.114.12:81

  1. Navigate to the SSL certification step in the configuration wizard.
  2. Choose the installation method:
    • select System provided in order to create or download the CSR file to use to obtain an SSL certificate (see Generate the private key and the CSR).
    • select Upload my own private key to use a private key generated elsewhere.
  3. Import the private key (if it was not created by the installation wizard) and the certificate files.
  4. Import the intermediate certificate file (optional) if it is provided by the CA. If uploaded, it will be appended to the certificate file and used as a single certificate.
  5. All files must be < 50kB; an alert should appear if they are too large.
    The private key and the certificates must match.
  6. Begin the certificate installation.

Generate the private key and the CSR

  1. Go to the page Generate private key and CSR by choosing the method System provided on the first page and by following the link “Create a private key and a CSR”.
  2. Provide the information about the party for which the certificate will be issued:
    • All the fields are required
    • The button Generate CSR must remain disabled until all fields are filled in.
    • The country will be pre-filled based on the user’s time zone, if it is set in the /etc/localtime file.
  3. Submit your information by clicking the button Generate CSR – note that if a CSR file already exists, it will be overwritten, as will the stored private key.
  4. Check whether the private key and CSR files are created in /opt/httpd/etc/ssl_temp/ (ssl_cert.csr, ssl_cert.key).
  5. Copy the CSR output or download a CSR file.
  6. Use the created CSR to generate and sign the SSL certificate.
  7. Return to the first page to install your certificate.

I already have a private key

If you already have a private key, you can import it in the "Upload my own private key" section, then you can import your certificate in .csr or .crt format.

Share

TUTORIAL: Add an SSL certificate in PBXware

Or copy the link below

CONTENT