Re: [cobalt-users] Re: [RaQ3] Newbie 128 bit cert query (UK) [more]

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

andy.hughes@xxxxxxxxxxxxxxxxx wrote:

> I didn't envisage any problems with the certificate working on the
> RaQ3 the problem is how do I tell apache it has a certificate?

Here's how we did it on the RaQ2 using the Brosoft SSL and an Equifax
cert:

  <VirtualHost secure.domain.com:443>
  DocumentRoot /home/sites/site23/secure
  ServerName secure.domain.com
  ServerAdmin admin@xxxxxxxxxxxxxxxxx
  UseCanonicalName On
  ScriptAlias /cgi-bin/ /home/sites/site23/secure/cgi-bin/
  SSLEngine on
  SSLCertificateFile    /etc/shttpd/conf/site23/ssl.crt/server.crt
  SSLCertificateKeyFile /etc/shttpd/conf/site23/ssl.key/server.key
  SSLCACertificateFile  /etc/shttpd/conf/site23/ssl.ca/server.ca
  </VirtualHost>

> > >  BT Trustwise global certificates require that an
> > >   additional intermediate certificate is also installed.
> > > Yet another issue.
> > This requires another line in the virtual host host
> > block for the site, pointing to a directory/filename
> > where you've installed the additional certificate.
> > I've recently been able to get
> > this to work with Equifax certs on a RaQ2.
> 
> Any chance of a quick walk-through (I now it's a RaQ2
> but I would hope to be able to hack your solution
> ont a RaQ3) ?

The SSLCACertificateFile line is for that "chained" certificate.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205