[cobalt-users] Re: [RaQ3] Newbie 128 bit cert query (UK) [more]

[andy.hughes@xxxxxxxxxxxxxxxxx]

Hello.

Many thanks to Graeme Fowler <graeme.f@xxxxxxxxxxxxxxx> and
Jeff Lasman <jblists@xxxxxxxxxxxxx>
for replying.
Thanks for taking the time.


Replying to their comments:

both mentioned that the certificate is for a
specific server and (perhaps) the IP numbers
need to match.

This *is* the case here, the relevant domain name
(www.servername-on-certificate.tld)
is on the RaQ3, the intended server was an
upgrade that has sadly hit major delays :-(

During ceritificate generation there was no
mention of specific IP numbers and my
understanding is that it is the server name
that is important, not the IP number ...
... of course, I could be wrong here :-)


> Also, some Certificate Authorities care about things like
> the operating system as well.

As I understand it Stronghold (the BT Trustwise recomended
server) is built on mod_ssl, as is the RaQ3's ssl.
I didn't envisage any problems with the certificate working on the RaQ3 the problem is how do I tell apache
it has a certificate?


> >  BT Trustwise global certificates require that an
> >   additional intermediate certificate is also installed.
> > Yet another issue.
> This requires another line in the virtual host host
> block for the site, pointing to a directory/filename
> where you've installed the additional certificate.
> I've recently been able to get
> this to work with Equifax certs on a RaQ2.

Any chance of a quick walk-through (I now it's a RaQ2
but I would hope to be able to hack your solution
ont a RaQ3) ?

Ideally, snippets from httpd.conf and whatever would
be a real boon!

I have stated hacking httpd.conf and am stripping out the
embedded perl but would rather adapt someone else's
tried-and-tested solution rather than reinvent the wheel if possible.

PS - anyone have a support number for Cobalt in the UK?
The only one I have found in Europe is in the Netherlands.

Again, thanks for your help.

Cheers,
   Andy.
--
"You don't buy beer, you only rent it"

************************************************************************
Norweb Telecom Ltd
Hathersage Road
Chorlton-on-Medlock
Manchester  M13 0EH

Switchboard number : 0161 609 7000.

The information contained in this e-mail is intended only for the
individual to whom it is addressed. It may contain privileged and
confidential information. If you have received this message in
error or there are any problems, please notify the sender
immediately and delete the message from your computer. The
unauthorised use, disclosure, copying or alteration of this
message is forbidden. Norweb Telecom Limited will not be liable
for direct, special, indirect or consequential damage as a result
of any virus being passed on, or arising from alteration of the
contents of this message by a third party.

Norweb Telecom Limited (England and Wales No. 3842309)
registered office PO Box 14, 410 Birchwood Boulevard,
Birchwood, Warrington, WA3 7GA

************************************************************************