[cobalt-developers] SSL Certificate from other machine.

["Michelle A. Hoyle" <michelle@xxxxxxxxxxxxx>]

> Date: Thu, 26 Oct 2000 11:00:03 -0700
> From: Herb Rubin <herbr@xxxxxxxxxxxx>
>
> I have a certificate and private key from a non cobalt machine I want to
> move
> over to my Raq 4. It was from Apache mod_ssl so it should work.
>
> I found the directory to put the 2 files in but see no way to type in
> the pass phrase.
> When I click on SSL settings I see it come up, so thats good.
>
> Does anybody have a procedure I should follow?
>
> Herb
I'll tell you what I did when I didn't find that the GUI conveniently 
accommodated moving a certificate from one machine to another.

1) I generated a self-signed certificate for the site in question.

2) I took my key, certificate, and request files from my old
   Apache mod_ssl installation and copied them over top of the
   appropriate files /home/sites/site_in_question.com/certs/
   These were the files called bleah.key, bleah.csr, etc.
      - do this by telnetting (or ssh, if you have it installed) to your
        Raq, logging in as admin and then su to root.
      - make sure that the file permissions are still the same and
        the files are owned by the correct person (root)
        The certificate, key, and request files should be
        chmod ug+rw only.

3) Restarted the admin server and the web server using
   /etc/rc.d/init.d/admserv restart and
   /etc/rc.d/init.d/httpd restart

4) When all the stuff had restarted, log in to the GUI, wander
   over to the SSL settings for that site and take a gander.
   The CSR stuff should be properly filled in with the contents
   of your certificate and it should have the Certificate Authority
   info below it.

5) Test it in your browsers.

Michelle
--

----|      TRANSCENA DESIGN  |----------------------------
Michelle A. Hoyle, VP Web Technologies, Canada
#801 T.D. Tower, Edmonton, Alberta, Canada  T5J 2Z1
N. America:  1-888-429-2363  |  UK:  020 7529 1465
International:  +1 780 429 2363
------------------|  internet design architects     |--------