Install Custom SSL Certificates

ISSUE

Use their self-generated certificates for the appliance

RESOLUTION

 

Prerequisites:

  1. Generated a Public/Private Key Pair and CSR
  2. Requested Certificate from CA Server
  3. Downloaded Certificate and Chain File to Appliance tmp folder


Follow the below steps after the above have been completed by the customer:

Place the 3 certificates generated into /backups/samba

 Next
 

cd /backups/samba


Next we will need to convert the P7B chain into a cer file for apache 
 

openssl pkcs7 -print_certs -in HOSTNAMEChain.p7b -out HOSTNAME.cer


**Should put you on the next line, no output provided**

Next we need to modify the ssl.conf
 

vi /etc/httpd/conf.d/ssl.conf


Modify to match the below entries. Find the top line of each and comment it out with a # and then add the 2nd line in. Do this for all 3 entries. 
 

#SSLCertificateFile /etc/pki/tls/private/localhost.crt
SSLCertificateFile /backups/samba/HOSTNAME-DR.crt


#SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
SSLCertificateKeyFile /backups/samba/HOSTNAME.key


#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
SSLCertificateChainFile /backups/samba/HOSTNAME.cer

Save the file

service httpd restart


Check for success

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Contact us
Provide feedback for the Documentation team!