Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Руководство администратора

Страница: 199 / 216

Managing SSL Certificates for Apache 199
no
vd
ocx
(e
n)
13
Ma
y 20
09
Š
If you have received a single
.pem
file from the trusted authority, copy that to the shared
key directory location. At a terminal console, enter
cp ./ filename .pem / etc / sharedkey /
4 Perform either of the following:
4a Edit the Apache SSL configuration file (
/etc/apache2/vhosts.d/vhost-ssl.conf
)
to point to the
.key
file and
.cert
file by modifying the values for the following
parameters:
SSLCertificateKeyFile= /etc/sharedkey/filename .key
SSLCertificateFile= /etc/sharedkey/filename .cert
Replace the path to the files with the actual location and filenames.
4b Edit the Apache SSL configuration file (
/etc/apache2/vhosts.d/vhost-ssl.conf
)
to point to the
.pem
file by modifying the values for the following parameters:
SSLCertificateKeyFile=/ etc / sharedkey / filename .pem
SSLCertificateFile=/ etc / sharedkey / filename .pem
WARNING: Ensure that there are no duplicate entries for
SSLCertificateKeyFile
and
SSLCertificateFile
in the Apache SSL configuration file.
5 Restart the Apache server.
F.4 Configuring Apache to Point to an SSL
Certificate on a Shared Volume for an iFolder
Cluster
1 Mount the shared volume. At a terminal console, enter
mnt /dev/sda1 /mnt/ifolder3
Replace
/dev/sda1
with the actual disk or partition containing the file system. Replace
/mnt/
ifolder3
with the mount point (directory path) of the shared volume.
2 Do either of the following:
Š Copy the private key (
.key
file) and the certificate (
.cert
file) to a location on the
mounted shared volume. At a terminal console, enter
cp ./ filename .key /mnt/ifolder3/sharedkey/
cp ./ filename .cert /mnt/ifolder3/sharedkey/
Replace
filename
with the actual file name of your
.key
and
.cert
files. Replace the
destination path with the location where you want to store the shared key and certificate
files.
Š
If you have received a single
.pem
file from the trusted authority, copy that to the shared
keydirectory location. At a terminal console, enter
cp ./ filename .pem / mnt / ifolder3 / sharedkey /
3 Do either of the following:
Š Edit the Apache SSL configuration file (
/etc/apache2/vhosts.d/vhost-ssl.conf
)
to point to the
.key
file and
.cert
file by modifying the values for the following
parameters:
SSLCertificateKeyFile= /mnt/ifolder3/sharedkey/filename .key