Install a X.509 Certificate from a Certificate Signing Request

            Generate a Certificate Signing Request
            1. Log in Nodegrid as root:

              1. ssh root@<Nodegrid_IP>

            2. Change directory to /etc/CA:

              1. cd /etc/CA

            3. Create a RSA key:

              1. openssl genrsa -out key.pem.new 2048

            4. Create a Certificate Signing Request:

              1. openssl req -new -sha256 -key key.pem.new -out csr.pem

            5. Make sure the files have the right permissions:

              1. chmod 0640 *.new

            6. Sign the Certificate Signing Request:

              1. Send the Certificate Signing Request domain.csr to a Certificate Authority to be signed.

              2. The Certificate Authority will sign the CSR and send you a certificate in PEM format.


            Install the Signed Certificate

            1. Copy the signed certificate received from the Certificate Authority to Nodegrid:

              1. scp <certificate> root@<Nodegrid_IP>:/etc/CA/cert.pem.new

            2. Log in Nodegrid as root:

              1. ssh root@<Nodegrid_IP>

            3. Change directory to /etc/CA:

              1. cd /etc/CA

            4. Back up the original key and certificate:

              1. cp key.pem key.pem.old

              2. cp cert.pem cert.pem.old

              3. cp key_cert.pem key_cert.pem.old

            5. Install the new key and certificate:

              1. mv key.pem.new key.pem

              2. mv cert.pem.new cert.pem

              3. cat key.pem cert.pem > key_cert.pem

            6. Make sure the files have the right permissions:

              1. chmod 0640 key_cert.pem

              2. chmod 0644 cert.pem

            7. Restart apache

              1. apachectl graceful


            Updated: 08 Jun 2018 03:59 AM
            Helpful?  
            Help us to make this article better
            0 0