Changes between Version 50 and Version 51 of NewLiveServer

Timestamp:

11/08/10 23:47:18 (6 years ago)

Author:

chris

Comment:

--

NewLiveServer

@@ -39 +39 @@
 
 The main configuration file is /etc/apache2/apache2.conf and the virtual hosts are sym linked from /etc/apache2/sites-enabled
+
+The HTTPS !VirtualHosts have the following directives:
+
+{{{
+SSLEngine on
+SSLCipherSuite HIGH
+SSLProtocol all -SSLv2
+SSLCertificateFile      /etc/ssl/transitionnetwork.org/transitionnetwork.org.pem
+SSLCertificateChainFile /etc/ssl/transitionnetwork.org/gandi.pem
+}}}
+
+The transitionnetwork.org.pem file contains both the certificate and the key (these are the files from gandi.net):
+
+{{{
+cat transitionnetwork.org.crt > transitionnetwork.org.pem
+cat transitionnetwork.org.key >> transitionnetwork.org.pem
+}}}
+
+And the gandi.pem contains the cert and the chain of root certificates:
+
+{{{
+wget http://crt.gandi.net/GandiStandardSSLCA.crt
+wget http://crt.usertrust.com/UTNAddTrustServer_CA.crt
+wget http://crt.usertrust.com/AddTrustExternalCARoot.crt
+openssl x509 -inform DER -in GandiStandardSSLCA.crt -out GandiStandardSSLCA.pem
+openssl x509 -inform DER -in AddTrustExternalCARoot.crt -out AddTrustExternalCARoot.pem
+openssl x509 -inform DER -in UTNAddTrustServer_CA.crt -out UTNAddTrustServer_CA.pem
+cat transitionnetwork.org.crt > gandi.pem
+cat GandiStandardSSLCA.pem >> gandi.pem
+cat AddTrustExternalCARoot.pem >> gandi.pem
+cat UTNAddTrustServer_CA.pem >> gandi.pem
+}}}
 
 == apc ==