Install StartSSL certificate to Webmin

This guide provide step-by-step on how to install StartSSL certificate to Webmin so that we can access to the Wemin Control Panel with a signed https address.

1. First, if the private key is created by StartSSL and password-protected, we should decrypt it:

   openssl rsa -in server.name-ssl.key -out server.name-ssl.key

2. Combined private keys and certificates to have webmin-compatible pem files:

   cat server.name-ssl.key server.name-ssl.crt > server.name.pem
   cat ca.pem sub.class1.server.ca.pem >> startSSL_chained.pem

3. Open and edit the /etc/webmin/miniserv.conf and point the SSL information to the above generated pem files (remember to backup this file first so we can go back if there is any problem):

   keyfile=/home/ssl-storage/startssl/server.name.pem
   extracas=/home/ssl-storage/startssl/startSSL_chained.pem

4. Restart webmin and access https://server.yourdomain.com:10000 to see the green web-address bar 🙂

Notes

• We can use online CSR and private key generator at https://www.gogetssl.com/online-csr-generator/
• We can validate CSR information at https://www.gogetssl.com/online-csr-decoder/