PhpWiki - Creating a CA signed SSL Certificate

Creating a CA signed SSL Certificate on SME 7.0

Author : william_syd
Tested on SME Version:
Updated :
License :

This How-to describes the way to create and install CA signed SSL Certificates on SME 7.0.

Refer to the Red Hat Enterprise Linux 4 System Administration Guide

http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/pdf/rhel-sag-en.pdf

Follow the steps from 26.6 to 26.7 for a CA signed certificate.

Take note of the note:

Note that if you do not want to type in a passphrase every
time you start your secure server, you must use the following
two commands instead of make genkey to create the key.

We now make SME aware of where the new certificates are

If you followed the RedHat manual your new certificate and private key are located at:

/etc/httpd/conf/ssl.crt/server.crt
/etc/httpd/conf/ssl.key/server.key

To add these locations to the database:

/sbin/e-smith/config setprop modSSL crt /etc/httpd/conf/ssl.crt/server.crt
/sbin/e-smith/config setprop modSSL key /etc/httpd/conf/ssl.key/server.key

Let SME know about the changes we have made:

/sbin/e-smith/signal-event post-upgrade

And finally a reboot

/sbin/e-smith/signal-event reboot

If you change change your mind and want to go back to self signed certificates (which SME will auto renew on expiry)

/sbin/e-smith/config delprop modSSL crt
/sbin/e-smith/config delprop modSSL key
/sbin/e-smith/signal-event post-upgrade
/sbin/e-smith/signal-event reboot

If you wish to customise your self signed certificate then look here Creating a Custom signed SSL Certificate

References:

Information gathered from this forum thread http://forums.contribs.org/viewtopic.php?p=126905#126905
Get free signed certificates from here ... http://www.cacert.org/index.php?id=12

Back AllPages SME7Howtos

Please Note: Comments should NOT contain request for help. Please ask for help in the forum/s listed in the references section.

Headline:

See Help /GoodStyle tips for editing.

Help:TextFormattingRules
Emphasis: _ for italics, * for bold, _* for both, = for fixed width.
Lists: * for bullet lists, # for numbered lists, Term:<new-line> definition for definition lists.
Preformatted text: Enclose text in <pre></pre> or <verbatim></verbatim>.
Indented text: Indent the paragraph with whitespaces.
References: JoinCapitalizedWords or use square brackets for a [page link] or URL [http://cool.wiki.int/].
Preventing linking: Prefix with "~": ~DoNotHyperlink, name links like [text | URL or pagename].
Misc: "!", "!!", "!!!" make headings, "%%%" or "<br>" makes a linebreak, "----" makes a horizontal rule.
Allowed HTML tags: b big i small tt em strong abbr acronym cite code dfn kbd samp var ^sup _sub

Those pages link to Creating a CA signed SSL Certificate: