 |
Managed PKI for SSL Support
|
Installation Instructions for Apache-SSL
This document provides instructions for installing
SSL Certificates. If you are unable to use these instructions for your
server, VeriSign recommends that you contact your software vendor or
an organisation that supports Apache-SSL.
Premium and Intranet Edition SSL Certificates
If you are installing a Managed PKI for SSL
Premium Edition or a Managed PKI for SSL Intranet Certificate, you need
to first install the intermediate CA (‘intermediate.crt’) provided by
your administrator. Place the text file in the same directory as your
SSL Certificate. For example: /usr/local/ssl/crt
Managed PKI for SSL Administrators: how to
find your Intermediate
CA.
Step 1: Install Your SSL Certificate
When your Admin has approved your request,
you will receive an email from VeriSign that contains your certificate.
If the certificate is an attachment (Cert.cer), you can use the file.
If the certificate is in the body of the email, copy and paste it into
a text file (such as OriginalCert.txt) using Vi or Notepad. Do not use
Microsoft Word or other word processing programs that may add characters.
Confirm that there are no extra lines or spaces in the file.
- To follow
the naming convention for Apache, rename the certificate filename with
the .crt extension. For example: cert.crt
- Copy
your Certificate into the directory you will be using to hold your certificates.
For example: /usr/local/ssl/crt/
Step 2: Configure the Server
To use the key pair, the httpd.conf file needs
to be updated.
- In the
Virtual Host settings, in the httpd.conf file, add the following SSL
directives, changing path and filenames for your server.
SSLCertificateFile
/usr/local/ssl/crt/public.crt |
Location of the certificate
file. |
SSLCertificateKeyFile
/usr/local/ssl/private/private.key |
Location of the private key. |
SSLCACertificateFile
/usr/local/ssl/crt/intermediate.crt |
Location of the intermediate certificate. |
- Save your httpd.conf file and restart Apache. Commonly used apachectl
script:
apachectl stop
apachectl startssl
- Start
using your VeriSign SSL Certificate with your Apache-SSL server.
Support
For more information, go to Apache
Support.
|
|
