November 16, 2011
Setting an SSL Certificate up on ITS servers
Well, the below post was informative for me but not at all the right way to set up SSL on an ITS server. Just between me and the internet, my efforts may have brought down the ITS servers as I received confirmation of my certificate seconds prior to the linked outage. Awesome.
Future reference, just email email@example.com to request a NEW certificate. Tell them to disable cosign and to have the https site load content from the same location as the http. Simple as that. Sheesh.
This may morph into a large post or become broken into smaller ones. We'll see.
1. Request an SSL Certificate at the Wasup Portal. Self-explanatory for the most part except...
- Creating the Certificate Signing Request
The Wasup service directs you to Instant SSL Comodo for help, which I found to be not helpful. I recommend going to Digicert to generate the terminal command you need to run to generate your CSR.
Logon to your webserver via ssh. Change to your Private directory and run this command.
% openssl req -new -newkey rsa:2048 -nodes -out umbs_lsa_umich_edu.csr -keyout umbs_lsa_umich_edu.key -subj "/C=US/ST=Michigan/L=Ann Arbor/O=University of Michigan/CN=umbs.lsa.umich.edu"
This generates two files:
umbs_lsa_umich_edu.csr - copy and paste everything from this file into the wasup request form
umbs_lsa_umich_edu.key - remove this from the web server and put it somewhere very safe. I committed it to memory and swallowed the file to destroy it. Steel. Trap.
Interesting command to backout a CSR:
% openssl req -in umbs_lsa_umich_edu.csr -noout -text
If you find SSL certificates confusing (as I do) check out this FAQ page for a layman's overview.
Posted by kkwaiser at November 16, 2011 02:47 PM
TrackBack URL for this entry:
Listed below are links to weblogs that reference Setting an SSL Certificate up on ITS servers:
» well nanoo from well nanoo
I have a Joomla website and already set up a Google Analytics account, now how do I add the code to my website so that it will keep track of visitors etc to every page? Thanks!. [Read More]
Tracked on February 9, 2014 08:55 AM
Tracked on February 16, 2014 10:41 PM
» website from website
It is very annoying to me that Firefox always opens mp3, wmv, mpg and opther file types in the browser window. Is there a way to set it to always open these files in winamp, VLC player, or anything else?. [Read More]
Tracked on February 21, 2014 09:57 AM
» nuvaring lawyer from nuvaring lawyer
You are a poor junior professor of computer science and are short of cash.. A computer magazine offers you a steady side job writing. one short article a month for three years. 36 months. The catch is the editor wants you to write about. the 12 differe... [Read More]
Tracked on February 21, 2014 12:56 PM
Tracked on February 24, 2014 04:59 AM
Tracked on February 26, 2014 06:47 AM
» homeowners insurance reviews georgia from homeowners insurance reviews georgia
I have had Firefox, IE, and Google chrome downloaded onto my computer for a while now with no problem. Recently I downloaded YIM and now Firefox doesn't start up. If I restart my computer a few times, and try to open it a few dozen times each time I re... [Read More]
Tracked on February 27, 2014 04:33 AM
» see this page from see this page
heyas :-). how are you all?. well i love to write and i rele want to get into creative writing and but i have a hard time coming up with ideas on what to write about and was wondering if you knew how i could get over this "writer's block"?. . thanks so... [Read More]
Tracked on March 1, 2014 07:54 PM
» credit fraud singapore from credit fraud singapore
I want to start a website for my Roller derby team, all we have is a myspace right now. How can I start a website that has a dot com, or html, etc, that I can design on my own, and keep up on my own so that we can actually have a website for fans to go... [Read More]
Tracked on March 3, 2014 06:08 PM
Tracked on March 6, 2014 03:35 PM
Tracked on March 7, 2014 08:33 AM
Tracked on March 7, 2014 10:33 AM