Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Руководство администратора

Страница: 200 / 216

200 OES 2 SP1: Novell iFolder 3.7 Administration Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
SSLCertificateFile= /mnt/ifolder3/sharedkey/filename .cert
Replace the path to the files with the actual location and filename on the shared volume.
Š
Edit the Apache SSL configuration file (
/etc/apache2/vhosts.d/vhost-ssl.conf
)
to point to the
.pem
file by modifying the values for the following parameters:
SSLCertificateKeyFile=/ mnt / ifolder3 / sharedkey / filename .pem
SSLCertificateFile=/ mnt / ifolder3 / sharedkey / filename .pem
WARNING: Ensure that there are no duplicate entries for
SSLCertificateKeyFile
and
SSLCertificateFile
in the Apache SSL configuration file.
4 Restart the Apache server.
NOTE: Ensure that the shared volume is mounted before you start the Apache server.
F.5 Configuring Apache to Point to an SSL
Certificate on a NSS Volume for an iFolder
Cluster
1 Create a shared key directory from console: At a terminal console, enter
mkdir -p /media/nss/VOL1/ ifolder3/sharedkey /
VOL1 is the NSS volume and if it’s not mounted use the NSSMU to mount the volume and
replace the filepath with the actual filepath.
2 Perform either of the following:
2a
Copy the private key (.
key
file) and the certificate (.
cert
file) or the
.pem
file to a
location on the mounted NSS volume. At a terminal console, enter
cp ./ filename .key / media / nss / VOL1 / ifolder3 / sharedkey / filename .key
cp ./ filename .cert / media / nss / VOL1 / ifolder3 / sharedkey / filename .cert
Replace filename with the actual file name of your .key and .cert files. Replace the
destination path with the location where you want to store the shared key and certificate
files.
2b If you have received a single
.pem
file from the trusted authority, copy that to the
sharedkey directory location. At a terminal console, enter
cp ./filename.pem /media/nss/VOL1/ifolder3/sharedkey/filename.pem
3 Perform either of the following:
3a Edit the Apache SSL configuration file (
/etc/apache2/vhosts.d/vhost-ssl.conf
)
to point to the
.key
file and
.cert
file on the NSS volume by modifying the values for
the following parameters:
SSLCertificateKeyFile=/ media / nss / VOL1 / ifolder3 / sharedkey / filename .key
SSLCertificateFile=/ media / nss / VOL1 / ifolder3 / sharedkey / filename .cert
Replace the path to the files with the actual location and filename on the shared volume.
3b Edit the Apache SSL configuration file (
/etc/apache2/vhosts.d/vhost-ssl.conf
)
to point to the .
pem
file on the NSS volume by modifying the values for the following
parameters:
SSLCertificateKeyFile=/ media / nss / VOL1 / ifolder3 / sharedkey / filename .pem