« Installing DEIMS using features | Main | Enhancing Drupal Security »
November 16, 2011
Setting an SSL Certificate up on ITS servers
Well, the below post was informative for me but not at all the right way to set up SSL on an ITS server. Just between me and the internet, my efforts may have brought down the ITS servers as I received confirmation of my certificate seconds prior to the linked outage. Awesome.
Future reference, just email webmasters@umich.edu to request a NEW certificate. Tell them to disable cosign and to have the https site load content from the same location as the http. Simple as that. Sheesh.
This may morph into a large post or become broken into smaller ones. We'll see.
1. Request an SSL Certificate at the Wasup Portal. Self-explanatory for the most part except...
- Creating the Certificate Signing Request
The Wasup service directs you to Instant SSL Comodo for help, which I found to be not helpful. I recommend going to Digicert to generate the terminal command you need to run to generate your CSR.
Logon to your webserver via ssh. Change to your Private directory and run this command.
% openssl req -new -newkey rsa:2048 -nodes -out umbs_lsa_umich_edu.csr -keyout umbs_lsa_umich_edu.key -subj "/C=US/ST=Michigan/L=Ann Arbor/O=University of Michigan/CN=umbs.lsa.umich.edu"
This generates two files:
umbs_lsa_umich_edu.csr - copy and paste everything from this file into the wasup request form
umbs_lsa_umich_edu.key - remove this from the web server and put it somewhere very safe. I committed it to memory and swallowed the file to destroy it. Steel. Trap.
Interesting command to backout a CSR:
% openssl req -in umbs_lsa_umich_edu.csr -noout -text
If you find SSL certificates confusing (as I do) check out this FAQ page for a layman's overview.
Posted by kkwaiser at November 16, 2011 02:47 PM
Trackback Pings
TrackBack URL for this entry:
http://mblog.lib.umich.edu/mt-bin/mt-tb.cgi/2300
Listed below are links to weblogs that reference Setting an SSL Certificate up on ITS servers:
» proslank kortingscode from kortingscode proslank
Lekkere eiwit maaltijden om af te vallen met extra korting! [Read More]
Tracked on May 29, 2012 06:04 PM
» cheap red bottom shoes from cheap red bottom shoes
Howdy. Très beau site! Guy .. Excellent .. Wonderful .. Je vais favoris de votre site Web et de prendre les alimentations aussi ... Je suis heureux de trouver autant d'informations utiles ici dans le poste. Merci pour le partage. [Read More]
Tracked on April 4, 2013 08:09 AM
» posicionamiento web from posicionamiento web
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 7, 2013 11:12 AM
» phen375 user reviews from phen375 user reviews
However, keep in mind that these may well not even be successful in any respect and may potentially damage your shape. Like many other diet supplement medications, Phentermine features its own share of disadvantages and advantages, so it is safer to t... [Read More]
Tracked on April 8, 2013 12:08 AM
» nike blazers sale from nike blazers sale
Zune and iPod: Most people compare the Zune to the Touch, but after seeing how slim and surprisingly small and light it is, I consider it to be a rather unique hybrid that combines qualities of both the Touch and the Nano. It's very colorful and lovely... [Read More]
Tracked on April 10, 2013 11:19 AM
» iqiceQjQ from iqiceQjQ
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 10, 2013 11:29 AM
» nike blazer femme from nike blazer femme
Between me and my husband we've owned more MP3 players over the years than I can count, including Sansas, iRivers, iPods (classic & touch), the Ibiza Rhapsody, etc. But, the last few years I've settled down to one line of players. Why? Because I was ha... [Read More]
Tracked on April 13, 2013 04:03 AM
» mulberry bags from mulberry bags
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 16, 2013 09:27 PM
» wow gold from wow gold
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 17, 2013 04:54 PM
» miu miu from miu miu
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 17, 2013 07:34 PM
» seo tools from seo tools
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 17, 2013 08:41 PM
» hermes bags from hermes bags
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 17, 2013 09:38 PM
» red bottom shoes from red bottom shoes
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 17, 2013 10:29 PM
» flyknit trainer nike from flyknit trainer nike
It occurred to me that plants can be something really mysterious and as alive as a jumping fish. Beeches with white arms embracing above our head, squat oaks and tortured elms straggled cheek by jowl of the beeches. Nettles choked the terrace, ivy held... [Read More]
Tracked on April 18, 2013 06:38 PM
» celine bags from celine bags
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 19, 2013 02:27 PM
» burberry bags from burberry bags
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on April 19, 2013 10:00 PM
» cheap new balance 574 from cheap new balance 574
I'll gear this review to 2 types of people: current Zune owners who are considering an upgrade, and people trying to decide between a Zune and an iPod. (There are other players worth considering out there, like the Sony Walkman X, but I hope this gives... [Read More]
Tracked on April 20, 2013 12:33 PM
» nike blazer from nike blazer
This is getting a bit more subjective, but I much prefer the Zune Marketplace. The interface is colorful, has more flair, and some cool features like 'Mixview' that let you quickly see related albums, songs, or other users related to what you're listen... [Read More]
Tracked on April 20, 2013 07:06 PM
» TRX from TRX
Learn who's speaking of Trx Videos and the key reason why you ought to fear. [Read More]
Tracked on April 21, 2013 10:50 PM
» nike blazer vintage from nike blazer vintage
Zune and iPod: Most people compare the Zune to the Touch, but after seeing how slim and surprisingly small and light it is, I consider it to be a rather unique hybrid that combines qualities of both the Touch and the Nano. It's very colorful and lovely... [Read More]
Tracked on April 22, 2013 02:32 PM
» Cheap Michael Kors from Cheap Michael Kors
Destroy Nike Air Max 24 7 Difficulties Once And For All [Read More]
Tracked on April 22, 2013 05:09 PM
» www.club-jerseys.com from www.club-jerseys.com
Beat Air Jordan 11 Concord 2000 Pains For Ever [Read More]
Tracked on April 28, 2013 09:35 PM
» Burberry Outlet Online from Burberry Outlet Online
The toms outlet are available for you in various elelgant styles. [Read More]
Tracked on April 29, 2013 08:39 AM
» www.luckstyleshoes.com from www.luckstyleshoes.com
Advanced commentary reveals the know-how about Air Jordan 11 Concord For Sale and as well as reasons why you have got to take action soon. [Read More]
Tracked on April 30, 2013 11:02 AM
» jeremy scott chaussures from jeremy scott chaussures
It takes me into a mysterious aura, where every living thing grows with a specific sound, sound that nobody can hear; where in a black background stood an old castle, with decaying beauty, frightening spirits and horror mixed with love and death. And I... [Read More]
Tracked on April 30, 2013 06:22 PM
» sac louis vuitton from sac louis vuitton
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 1, 2013 01:35 AM
» Burberry Sale from Burberry Sale
tonight. I used to be looking forward HHHH to her justifying promises about Labour supposedly benefiting from electoral IIII fraud and i cheap mulberry bags suspect the unelected law maker might need also been tonight. I used to be looking forward HHHH to her justifying promises about Labour supposedly benefiting from electoral IIII fraud and i cheap mulberry bags suspect the unelected law maker might need also been [Read More]
Tracked on May 2, 2013 06:46 PM
» prada bags from prada bags
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 6, 2013 07:49 PM
» wow gold from wow gold
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 7, 2013 05:49 PM
» louis vuitton bags from louis vuitton bags
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 9, 2013 12:56 AM
» beats cheap from beats cheap
To music lovers, not all headphones are created equal. The engineering of sound is a delicate mixture of balance and volume. The SOL Republic headphones series has been popularized by Olympic Champion Michael Phelps. While this sound source has been re... [Read More]
Tracked on May 10, 2013 01:49 AM
» EIQlxvyj from EIQlxvyj
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 10, 2013 02:07 AM
» cheap tablets for sale Mi from cheap tablets for sale Mi
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 14, 2013 12:10 PM
» Oakley Eyepatch 2 Sunglasses from Oakley Eyepatch 2 Sunglasses
Couple of players could do what Kaline could on the field. He could hit for energy, usually had a high batting average, and was a perennial gold glover in correct field. He merely had no weaknesses. He won a batting title at the young age of 20! He was... [Read More]
Tracked on May 16, 2013 12:59 AM
» Cheap Louis Vuitton Handbags from Cheap Louis Vuitton Handbags
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 21, 2013 06:41 PM
» CHANEL HANDBAGS from CHANEL HANDBAGS
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 21, 2013 06:41 PM
» christian louboutin shoes from christian louboutin shoes
Data Discussions: Setting an SSL Certificate up on ITS servers [Read More]
Tracked on May 21, 2013 06:41 PM