Cyclades AlterPath BladeManager Instrukcja Obsługi Pobierz pdf (Strona 133)

Chapter 6: Administration Tasks Not Performed in the Web Manager 119

Replacing the Self-Signed Certificate With an SSL Certificate

for

HTTPS

As described in HTTPS on the MergePoint 5224/5240 SP Manager on page 28, an administrator

must replace the automatically generated self signed certificate with an SSL certificate from an

official certificate authority. The root user can follow the instructions in the following procedure to

generate a certificate signing request; after obtaining the certificate from the CA, the root user then

must install the public key and the certificate in the Apache web server on the SP manager.

To replace the self

-signed certificate with one from a certificate authority:

1. Log into the console as root.

2. Use

openssl with the req parameter to create a private key and a public CSR (certificate

signing request).

Use the command line shown in the following screen example.

[root@MergePoint5224 /]# openssl req -new -nodes -keyout private.key \

-out public.csr

The utility prompts for information. The required information is shown in the following table.

Any other requested information is not required.

The generated request automatically includes the public key.

3. Submit the CSR request to the certificate authority (CA).

After receiving the certificate from the CA, perform the remaining steps:

4. Copy the private key into /etc/httpd/conf/ssl.key/server.key.

Table 6.2: Required Information When Creating an SSL Certificate Request

Prompt What You Enter

Country Name (2 letter code) [AU]: The country code consisting of two letters

State or Province Name (full name)

[SomeState]:

The full name (not the postal abbreviation) of the state

Locality Name (e.g., city) []: The name of your city

Organization Name (e.g., company) [Internet

Widgits Ltd]:

The organization for which you want to obtain the certificate

Organizational Unit Name (e.g., section) []: The department or section

Common Name (e.g., your name or your

server’s hostname) []:

The name of the machine where the certificate must

be installed

Email Address []: Your email address or the administrator’s email address

1 2 ... 128 129 130 131 132 133 134 135 136 137 138 ... 239 240

Brak uwag

Cyclades AlterPath BladeManager Instrukcja Obsługi Strona 133