[cobalt-users] [RaQ3] Newbie 128 bit cert query (UK)

[andy.hughes@xxxxxxxxxxxxxxxxx]

Hello,
I am fairly comfortable with Apache and Linux but am new to Cobalt kit.
We are based in Manchester in the UK.


*** The Problem:
 We have a RaQ3 with 128 bit encryption
  (it works fine with a self signed certificate).

 We have a BT Trustwise global (i.e. 128 bit) certificate
  that we wish to use on this server.
 BT Trustwise are a UK company.

 I can't get it to work :-Z


*** The Question:
 Has anyone managed to get BT Trustwise 128 bit
  certificates (aka global certificates) working on a
  128 bit SSL RaQ3 ?


*** Background:
 Key, CSR and certificate generated using openSSL.
 (Certificate originally intended for another server).

 BT Trustwise global certificates require that an
  additional intermediate certificate is also installed.

 RaQ3 OS:
  Cobalt OS Release 5.0
  RaQ3-en-OSUpdate Release 3.0

 RaQ3 has correct IP and domain name for 128 bit
  certificate.


*** Resolution attempts
 I have read the online documentation
  (especially the section on SSL in the manual).

 I have also had a play with the web based
  management GUI.

 I browsed many megabytes of mail archives
  without finding anything particularly relevant
  or helpful.

 I examined httpd.conf.

 Contacted Cobalt support - no reply so far :-(
 Contacted BT Trustwise customer support - also no reply.


*** Present Status
 One way ahead that I can see would be to strip out
  the embedded perl section in httpd.conf that generates
  the ssl settings and replace with plain text entries
  because I need to specify *2* certificates to the server.
  (128 and intermediate).

 Additionally the original CSR was not generated on
  the RaQ3 so that will need to be sorted out as well.

 I have the key, csr and certificates.


Has anyone any experiences, thoughts or comments on how best to proceed ?
Have I missed something obvious ?

If anyone needs further information, please feel free to email me at:
  andy.hughes@xxxxxxxxxxxxxxxxx

Many thanks in advance for your time and trouble, it's appreciated.

Cheers,
   Andy.
--
"You don't buy beer, you only rent it"


************************************************************************
Norweb Telecom Ltd
Hathersage Road
Chorlton-on-Medlock
Manchester  M13 0EH

Switchboard number : 0161 609 7000.

The information contained in this e-mail is intended only for the
individual to whom it is addressed. It may contain privileged and
confidential information. If you have received this message in
error or there are any problems, please notify the sender
immediately and delete the message from your computer. The
unauthorised use, disclosure, copying or alteration of this
message is forbidden. Norweb Telecom Limited will not be liable
for direct, special, indirect or consequential damage as a result
of any virus being passed on, or arising from alteration of the
contents of this message by a third party.

Norweb Telecom Limited (England and Wales No. 3842309)
registered office PO Box 14, 410 Birchwood Boulevard,
Birchwood, Warrington, WA3 7GA

************************************************************************