aaPanel Panel Self certificated SSL issue

aaP_pskungfu

I followed the tutorial to set up the panel's ssl certificate, but did not find the files baota_root.pfx and root_password.pl in the directory /www/server/panel/ssl.
![
I just found them in the directory /www/server/panel/ssl_init, but using them directly didn't work.

Please advise what to do

aaPanel_Kern

Hello, have you set up SSL manually? If not, you can copy all the files under ssl_init to ssl, then restart aapanel, and then set it up.

aaP_pskungfu

aaPanel_Kern
The version is 7.0.11

aaP_pskungfu

Yes, I set up SSL manually via turning on Panel SSL setting.
I follow your step, copy all the files under ssl_init to ssl, then restart aapanel.
And manually turn on the panel ssl.
There is still no baota_root.pfx and root_password.pl files. It disppeared.

aaPanel_Kern

Try copying the default certificate to see if that solves the problem.
cp -arpf /www/server/panel/ssl_init/* /www/server/panel/ssl/ && bt restart

aaP_pskungfu

aaPanel_Kern
I executed your code from the command line. The browser still says it's not secure

I deleted the files in the ssl document. And copy all the ssl_files to ssl. and restart panel. Then manual trun on the panel ssl via settings. The certicate.pem and privateket.pem files are updated. The baota_root.pfx and root_password.pl files are still same as in ssl_init. So the browsers still says not secure.

aaP_pskungfu

aaPanel_Kern
I have installed the root certificate

aaPanel_Kern

aaP_pskungfu

Click here to trust, select all, then exit and save

aaP_pskungfu

aaPanel_Kern
Trust has been selected after installing the root certificate previously. Is it because the IP of its ssl certificate is 127.0.0.1 and not the IP of my server?

aaPanel_Kern

This should be the problem. It is recommended that you ignore it, or use a domain name certificate, apply for it on the website and paste it into the Panel ssl settings, and then use the domain name to access it.
There is no need to bind a domain name. The domain name A record must be the IP of the server.

aaP_pskungfu

aaPanel_Kern
Thanks to your reply, I gave up on using the IP self-signed SSL method and now I'm using a domain SSL certificate.