 | | | Installing Thawte Certificate | Installing Thawte Certificate 2003-05-09 - By Winston Gutkowski
Back
There is quite a lot to know about this stuff, so you should probably start
with the online manual at http://www.modssl.org/docs/.
First of all you need to issue a certificate signing request (CSR) from the
server in question (this is important; certificates only
apply to one machine) To do this, run:
# Create new private key
openssl genrsa -rand <anyfile> -out <directory>/private.key.pem 2048
# Create certificate signing request
openssl req -new -key <directory>/private.key.pem -days 365 -out <directory>
/server.csr.pem
(the above is from http://www.switch.ch/aai/pilot-docs/shibboleth/targetinstall
.txt; filenames are just for example)
Then send the CSR to Thawte by copying and pasting the contents into their
request page. After checking and payment, they will send
you a certificate with instructions on how to create a .crt file. Move this to
the machine in question and edit httpd.conf to
contain:
SSLCertificateFile <directory>/thawte.crt
SSLCertificateKeyFile <directory>/private.key.pem
Mod SSL also recommend that you encrypt your private key (example also
contained in
http://www.switch.ch/aai/pilot-docs/shibboleth/targetinstall.txt), although
this will cause a dialog to pop up requesting the
passphrase each time you access the server for a session. You can get around
this by setting up agents to forward key passphrases
etc etc...
As I said, there's lots to know.
Hope it helps.
Winston Gutkowski
-- --Original Message-- --
From: enigma-list-admin@(protected)
[mailto:enigma-list-admin@(protected)]On Behalf Of System
Sent: Thursday, May 08, 2003 23:14
To: Enigma
Subject: Installing Thawte Certificate
Hello,
I compiled mod_ssl and openssl and also installed the demo SSL Certificate
from SnakeOil Company that ships with the mod_ssl installtion.
My question is if i want to install Thawte SSL certificate on another server
how do i go abt it. I googled and also visited Thawte website but no proper
guidance i could get. So i am posting it on this list.
Any help would be appreciated.
Regards,
Tina.
__ ____ ____ ____ ____ ____ ____ ____ ____ ____
enigma-list mailing list
enigma-list@(protected)
https://listman.redhat.com/mailman/listinfo/enigma-list
Earn $52 per hosting referral at Lunarpages.
|
|
|