Coyote Point Systems E350GX, Installation And Administration Manual

Page: 288 / 344

Appendix E: Using Certificates in HTTPS Clusters
284 Equalizer Installation and Administration Guide
1. Save it to a text file (e.g., servcert.pem for a server certificate, or clientcert.pem for a client certificate).
2. Open a new text file and read both the signed certificate and your private key (in this order) into the file. (The
private key was created previously when you generated your CSR.) Save the file as a plain text file. On a Unix
system, like Equalizer, you can do this with a command like one the following:
cat servcert.pem privkey.pem > clustercert.pem
cat clientcert.pem privkey.pem > clientprivcert.pem
Whatever method you use, the file should look like this when you are done:
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----
Make sure you save the file as a plain text file.
3. Install the file into Equalizer as instructed in the section “Installing Certificates for an HTTPS Cluster” on page
284.
If the CA uses chained root, or intermediate, certificates, then you’ll receive (or need to download from the CA)
more than one
.pem file: the server certificate, plus any intermediate certificates needed to establish the chain of trust
back to a Root CA certificate installed on your web server or client browser.
If you get more than one certificate (the signed server certificate plus one or more intermediate certificates) from
your CA, then:
1. Save each certificate to a separate text file (e.g., servcert.pem , intmcert.pem ).
2. Open a new text file and read the signed certificate, your private key, and any intermediate certificates (in this
order) into the file. (Your private key was created previously, when you generated the CSR.) Save the file as a
plain text file. On a Unix system, like Equalizer, you can do this with a command like one of the following:
cat servcert.pem privkey.pem intmcert.pem > clustercert.pem
cat clientcert.pem privkey.pem intmcert.pem > clientprivcert.pem
Whatever method you use, the file should look like this when you are done:
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
Add more certificates here if needed in the chain...
Make sure you save the file as a plain text file.
3. Install the file into Equalizer as instructed in the section “Installing Certificates for an HTTPS Cluster” on page
284.
Installing Certificates for an HTTPS Cluster
Your certificate authority may issue you either a single signed client or server certificate, or a signed certificate plus
one or more chained root certificates (also called “intermediate” certificates). The certificate or certificates you