 |
SSL Certificates Support
|
Installation Instructions- SonicWALL Offloaders
This document provides instructions for installing
SSL Certificates. If you are unable to use these instructions for your
server, VeriSign recommends that you contact either the vendor of your
software or an organisation that supports SSL Offloaders.
Step 1: Install CA Certificate
Secure Site
If you are installing a Secure Site Certificate, you
need to first install the Secure
Site Intermediate CA Certificate.
Secure Site Pro
If you are installing a Secure Site Pro Certificate,
you need to first install the Secure
Site Pro Intermediate CA Certificate.
Note to ISP Center Customers: Certificates enrolled through
VeriSign's ISP Center do not need the Secure Site Intermediate CA Certificate
installed at this time.
Step 2: Install the SSL Certificate
VeriSign will email you your certificate. If
the certificate is an attachment (Cert.cer), you can use the file. If
the certificate is in the body of the email, copy and paste it into
a text file (such as OriginalCert.txt) using Vi or Notepad. Do not use
Microsoft Word or other word processing programs that may add characters.
Confirm that there are no extra lines or spaces in the file.
- Launch
openssl.exe. This application was installed at the same time and in
the same location as the SonicWALL configuration manager. You can also
run the install and just install OpenSSL by choosing the ‘Custom Installation’
option.
- Once
launched, you will need to enter the following commands:
pkcs7 -in C:\fullcert -print_certs
or
pkcs7 -in C:\fullcert -print_certs -out C:\outfile
- This
will output two x509v3 certificates. Subject and Issuer information
will be included in the output. Ignore this, and cut and paste only
the "BEGIN CERTIFICATE" and "END CERTIFICATE" information
on both certificates.
- The first
cert should be the server certificate. The second should be the intermediary
certificate.
- Save
these files (e.g. C:\server.pem and C:\inter.pem)
- Verify
the certificate information with openssl:
x509 -in C:\server.pem –text
and
x509 -in :C\inter.pem –text
Sonicwall SSL Offloader
For more information, see the Sonicwall
Documentation.
|