Welcome to TurnKey! :)

The easiest thing to do is to check what is inside the files. I recommend grep for that (grep searches text based files for specific patterns). I'll show you what I get from the default certificates that TurnKey produces. If what you have matches, then you're good to go. If not, then I can help you create the files that you need. Ours are created in such a way that the same certificate can be used for all our supported webservers (Apache, LigHTTPd and Nginx) as well as Webmin and Webshell.

So the default files are:

• /etc/ssl/private/cert.pem
• /etc/ssl/private/cert.key

Our default pem file contains the certificate, the key and the DH parameters. The default key file contains just the private key (the key is included twice, because some apps require a single file. others need 2 separate files by default). Lucky for us, each section of the file has a header and a footer which allows us to easily see what it is. Each header and footer is surrounded with five dashes (e.g. "-----"). So we'll use grep to search for that pattern like this:

grep -- ----- /etc/ssl/private/cert.pem

The double dash (straight after the grep) is to tell grep that the five dashes should be interpreted as the search string (for search terms which don't start with dashes, you don't need the extra double dash).

Anyway, this is what I get back:

-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
-----BEGIN DH PARAMETERS-----
-----END DH PARAMETERS-----

And the keyfile:

grep -- ----- /etc/ssl/private/cert.key
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----

So if you try the same commands on your files, hopefully you have something similar. If it's not exactly the same, post what you have and I'll tell you what you'll need to do.

Hey Edward and Jeremy,

I am not experienced by any means, but I think Edward is asking what I need to ask too.

I have the same two files from GoDaddy, but I am not sure where to put them, or where to change the symbolic links or whatever needs to be done for the new certs to be in place. They are two .crt files. One named gd_bundle and the other a long alpha/numeric name. Do I change the .key file name and rename the default to .old? Should I put them inside the cert.pem? Like Edward mentioned, we do not have a .pem file from GoDaddy. 

I have moved the files to my server already. Edward, you will need to FTP or SSH your GoDaddy cert files to your server. I use this command: SCP filename user@serveraddress:/path/to/folder

To make it easier, I navigate to the folder where the file is first, then use the command. Replace user@serveraddress with the appropriate user name and server FQDN or IP address. You may leave everything blank after the : and then move it later with the mv command.

Also, the .key file will already be on the server that made the CSR request.

Thanks Jeremy for all your time and effort, this is my first post but I have been using turnkey appliances for a couple years and truly appreciate all that you do.

Hi again,

I used the grep suggestion above but I do not have cert.pem or cert.key in the /etc/ssl/private folder. I did find them in the /etc/ssl/certs folder and got this from cert.pem:

-----BEGIN RSA PRIVATE KEY-----

-----END RSA PRIVATE KEY-----

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

and this from cert.key:

-----BEGIN RSA PRIVATE KEY-----

-----END RSA PRIVATE KEY-----

So I am suspecting that I either have an older appliance with different defaults, or I am overlooking something entirely. I look forward to any insights. Thanks!