Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Руководство администратора

Страница: 198 / 216

198 OES 2 SP1: Novell iFolder 3.7 Administration Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
Whichever method you use, the certificate is automatically used for the Apache Web Server
configuration. If it does not automaticially configure the certificate for the Apache Web Server, see
the following:
Š
Section F.3, “Configuring Apache to Point to an SSL Certificate on an iFolder Server,” on
page 198
Š Section F.4, “Configuring Apache to Point to an SSL Certificate on a Shared Volume for an
iFolder Cluster,” on page 199
F.2 Generating a Self-Signed SSL Certificate for
Testing Purposes
You can use theYaST CA Management plug-in or OpenSSL tools to create a self-signed certificate.
If iFolder is deployed in a trusted environment, use YaST. The YaST CA Management interface
contains modules for the basic management of X.509 certificates. This mainly involves the creation
of CAs, sub-CAs, and their certificates. For more information, see the following:
Š
Section 6.6.2, “Creating a YaST-based CA,” on page 79
Š Section 6.6.3, “Creating Self-Signed Certificates Using YaST,” on page 81
Š
Section 6.6.4, “Exporting Self-Signed Certificates,” on page 83
For detailed information about how to manage and update certificates, see Managing X.509
Certification (http://www.novell.com/documentation/sles10/sles_admin/data/cha_yast_ca.html) in
the SUSE Linux Enterprise Server 10 Installation and Administration Guide (http://
www.novell.com/documentation/sles10/sles_admin/data/bookinfo_book_sles_admin.html) .
For information about configuring Apache to point to the self-signed certificate, see the following:
Š
Section F.3, “Configuring Apache to Point to an SSL Certificate on an iFolder Server,” on
page 198
Š
Section F.4, “Configuring Apache to Point to an SSL Certificate on a Shared Volume for an
iFolder Cluster,” on page 199
F.3 Configuring Apache to Point to an SSL
Certificate on an iFolder Server
1 Get an SSL certificate from a trusted certificate authority.
2 Create a shared key directory. At a terminal console, enter
mkdir /etc/ sharedkey /
Replace
sharedkey
with the actual name of your key directory.
3
Do either of the following:
Š
Copy the private key (
.key
file) and the certificate (
.cert
file) to the shared key directory
location. At a terminal console, enter
cp ./ filename .key / etc / sharedkey /
cp ./ filename .cert / etc / sharedkey /
Replace
filename
with the actual file name of your
.key
and
.cert
files. Replace the
destination path with the shared key directory location where you want to store the
.key
and
.cert
files.