Cyclades AlterPath OnBoard, Руководство администратора

Страница: 59 / 460

Introduction 23
HTTPS on the OnBoard
HTTPS on the OnBoard
For HTTPS (secure HTTP based on SSL) to work, an SSL certificate must be
present on the OnBoard. To reduce the risks posed by weaknesses inherent in
self-signed certificates, OnBoard administrators are strongly advised to
replace the automatically-generated self-signed certificate with an SSL
certificate from an official certificate authority (CA). See
http://pki-
page.org
for a list of certification authorities, if needed. See also the
following procedure for how to generate a certificate signing request, and for
how to install the public key and the certificate in the Apache web server on
the OnBoard after you obtain the certificate from the CA.
T
To Replace the Self-Signed Certificate With
an SSL Certificate From a Certificate
Authority
1. Log into the OnBoard console as root.
2. Use
openssl
with the
req
parameter to create a private key and a
public CSR (certificate signing request).
Use the command line shown in the following screen example.
Note: The command line in the screen example is broken into two lines
because of space limitations. You can either enter the whole command on one
line or include a backslash (\) as shown to tell the shell that the command
continues on the following line.
The utility prompts for information. The required information is shown in the
following table. Any other requested information is not required.
[root@OnBoard /]#
openssl req -new -nodes -keyout private.key -out \
public.csr
Table 1-12: Required Information When Creating a SSL Certificate Request
Prompt What You Enter
Country Name (2 letter code) [AU]: The country code consisting of two letters.