RE: [cobalt-users] Certificate Question on Raq4

["Gavin Nelmes-Crocker" <cobalt@xxxxxxxxxxxxxxxx>]

> William Moore wrote:
>
> > I just bought a 128bit certificate from Geotrust ( formerly equifax )
> > the thing installed fine, no problems  but when you go to the
> site that is
> > protected
> > by it,  a popup comes up telling you the cert is self signed ??  Also no
> > where on the cert does it tell you that it is by geortrust
> >
> > is this a problem with the cert I bought or did I do something wrong ?

Jeff Lasman wrote:

> When you order a Geotrust cert you get two certificates.  One for the
> site, and one for the system.

correct

> You can automatically install the Geotrust site cert on your RaQ just
> like any other cert, but to install the system cert you have to go in
> through the shell.
>
Correct again - as I remember it you need to edit http.conf and either
upload the geotrust server cert or a cert bundle and then restart http.  I
will look at my server in the morning its late here and I've done a full
day - I wouldn't want to get it wrong and you screw your server :-).  I did
write a pkg for this a while ago but it was never fully tested.  I'll hunt
it out and do a quick update and test on a dev raq here with all the patches
and then post the solution and instructions :-)

Gavin