RE: Installing Thawte Certificate

There is quite a lot to know about this stuff, so you should probably start with the online manual at http://www.modssl.org/docs/.

First of all you need to issue a certificate signing request (CSR) from the server in question (this is important; certificates only
apply to one machine) To do this, run:

# Create new private key
openssl genrsa -rand <anyfile> -out <directory>/private.key.pem 2048
# Create certificate signing request
openssl req -new -key <directory>/private.key.pem -days 365 -out <directory>/server.csr.pem

(the above is from http://www.switch.ch/aai/pilot-docs/shibboleth/targetinstall.txt; filenames are just for example)

Then send the CSR to Thawte by copying and pasting the contents into their request page. After checking and payment, they will send
you a certificate with instructions on how to create a .crt file. Move this to the machine in question and edit httpd.conf to
contain:

SSLCertificateFile <directory>/thawte.crt
SSLCertificateKeyFile <directory>/private.key.pem

Mod SSL also recommend that you encrypt your private key (example also contained in
http://www.switch.ch/aai/pilot-docs/shibboleth/targetinstall.txt), although this will cause a dialog to pop up requesting the
passphrase each time you access the server for a session. You can get around this by setting up agents to forward key passphrases
etc etc...

As I said, there's lots to know.

Hope it helps.

Winston Gutkowski

-----Original Message-----
From: [email protected]
[mailto:[email protected]]On Behalf Of System
Sent: Thursday, May 08, 2003 23:14
To: Enigma
Subject: Installing Thawte Certificate


Hello,

I compiled mod_ssl and openssl and also installed the demo SSL Certificate
from SnakeOil Company that ships with the mod_ssl installtion.
My question is if i want to install Thawte SSL certificate on another server
how do i go abt it. I googled and also visited Thawte website but no proper
guidance i could get. So i am posting it on this list.

Any help would be appreciated.

Regards,
Tina.




_______________________________________________
enigma-list mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/enigma-list