Difference between revisions of "Apache Certificate"

From Roaring Penguin
Jump to: navigation, search
Line 1: Line 1:
 
> We need to put a new certificate into apache for the web interface.
 
> We need to put a new certificate into apache for the web interface.
  
* How do we create a CSR?   
+
1) How do we create a CSR?   
  
Via the usual Apache Cert Request mechanism. Short version:
+
Via the usual Apache Cert Request mechanism:
  
- Generate the CSR (on Linux done via):
+
Generate the CSR (on Linux done via):
  
openssl req -new -days 365 -key my-key-filename.key -out my-csr.csr
+
    openssl req -new -days 365 -key my-key-filename.key -out my-csr.csr
  
 
and answer the prompts.
 
and answer the prompts.
  
- Send my-csr.csr to your Certificate Authority
+
    Send my-csr.csr to your Certificate Authority
  
 
Your CA may have a form to fill out for the CSR - I've never dealt with  
 
Your CA may have a form to fill out for the CSR - I've never dealt with  
 
one, so I don't know.
 
one, so I don't know.
  
* Once we get the cert from digicert where do we put it?   
+
2) Once we get the cert from digicert where do we put it?   
  
Enter it into Setup->HTTPS in the spaces provided..
+
    Enter it into Setup->HTTPS in the spaces provided..
  
 
<div style="float:right; clear:both; margin-right:0.5em">[[Support Wiki | [Home]]]</div>
 
<div style="float:right; clear:both; margin-right:0.5em">[[Support Wiki | [Home]]]</div>
 
[[category:All]][[category:Security]]
 
[[category:All]][[category:Security]]

Revision as of 16:23, 5 February 2014

> We need to put a new certificate into apache for the web interface.

1) How do we create a CSR?

Via the usual Apache Cert Request mechanism:

Generate the CSR (on Linux done via):

   openssl req -new -days 365 -key my-key-filename.key -out my-csr.csr

and answer the prompts.

   Send my-csr.csr to your Certificate Authority

Your CA may have a form to fill out for the CSR - I've never dealt with one, so I don't know.

2) Once we get the cert from digicert where do we put it?

   Enter it into Setup->HTTPS in the spaces provided..