User Tools

Site Tools


computing:backup:ahsay_ssl

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
computing:backup:ahsay_ssl [2024/01/04 12:21]
gcooper
computing:backup:ahsay_ssl [2025/02/03 14:58] (current)
gcooper
Line 65: Line 65:
  
 Certificate request for a commercial cert: Certificate request for a commercial cert:
 +
 +:!: When prompted for ''first and last name'', enter the hostname FQDN.
  
 <file> <file>
Line 70: Line 72:
 </file> </file>
  
-Import the intermediate certificate first, then the primary cert:+Import the intermediate certificate(s) first, then the primary cert: 
 + 
 +:!: Comodo PositiveSSL Domain Validated intermediate certs shown. 
 + 
 +:!: You don't need to import a cert if it already exists.
  
 <file> <file>
-/opt/obs/java/bin/keytool -import -alias intermediate -trustcacerts -file /root/SSL/intermediate.ca.crt -keystore /opt/obs/conf/keystore+/opt/obs/java/bin/keytool -import -alias intermediate -trustcacerts -file /path/to/SectigoRSADomainValidationSecureServerCA.crt -keystore /opt/obs/conf/keystore
  
-/opt/obs/java/bin/keytool -import -alias tomcat -trustcacerts -file /root/SSL/star.mydomain.com.crt -keystore /opt/obs/conf/keystore+/opt/obs/java/bin/keytool -import -alias intermediate1 -trustcacerts -file /path/to/AAACertificateServices.crt -keystore /opt/obs/conf/keystore 
 + 
 +/opt/obs/java/bin/keytool -import -alias intermediate1 -trustcacerts -file /path/to/USERTrustRSAAAACA.crt -keystore /opt/obs/conf/keystore 
 + 
 +/opt/obs/java/bin/keytool -import -alias tomcat -trustcacerts -file /path/to/hostname.yourdomain.com.crt -keystore /opt/obs/conf/keystore 
 +</file> 
 + 
 +Restart OBSR: 
 + 
 +<file> 
 +service obsr stop && service obsr start 
 +</file> 
 + 
 +Make sure SSL port 443 is listening: 
 + 
 +<file> 
 +netstat -tapn
 </file> </file>
  
computing/backup/ahsay_ssl.1704396104.txt.gz · Last modified: 2024/01/04 12:21 by gcooper