Novell IFOLDER 3 - ADMINISTRATION, Руководство пользователя

Страница: 135 / 148

Managing SSL Certificates for Apache 135
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
For information about configuring Apache to point to the self-signed certificate, see the following:
• Section C.3, “Configuring Apache to Point to an SSL Certificate on an iFolder Server,” on
page 135
• Section C.4, “Configuring Apache to Point to an SSL Certificate on a Shared Volume for an
iFolder Cluster,” on page 135
C.3 Configuring Apache to Point to an SSL
Certificate on an iFolder Server
1 Get an SSL certificate from a trusted certificate authority.
2 Mount the volume where you manage certificates: At a terminal console, enter
mnt /dev/sda1 /mnt/ifolder3
Replace
/dev/sda1
with the actual disk or partition containing the file system. Replace
/
mnt/ifolder3
with the mount point (directory path) where you are managing certificates.
3 Copy the private key (
.key
file) and the certificate (
.cert
file) to a location on the mounted
volume. At a terminal console, enter
cp ./ filename .key /mnt/ifolder3/key/
cp ./ filename .cert /mnt/ifolder3/key/
Replace
filename
with the actual file name of your
.key
and
.cert
files. Replace the
destination path with the location on the mounted volume where you want to store the
.key
and
.cert
files.
4 For each node in the cluster, edit the Apache SSL configuration file (
/etc/apache2/
vhosts.d/vhost-ssl.conf
) to point to the
.key
file and
.cert
file on the volume
by modifying the values for the following parameters:
SSLCertificateKeyFile= /mnt/ifolder3/key/filename .key
SSLCertificateFile= /mnt/ifolder3/key/filename .cert
Replace the path to the files with the actual location and filenames.
C.4 Configuring Apache to Point to an SSL
Certificate on a Shared Volume for an iFolder
Cluster
1 Mount the shared volume. At a terminal console, enter
mnt /dev/sda1 /mnt/ifolder3
Replace
/dev/sda1
with the actual disk or partition containing the file system. Replace
/
mnt/ifolder3
with the mount point (directory path) of the shared volume.
2
Copy the private key (
.key
file) and the certificate (
.cert
file) to a location on the mounted
shared volume. At a terminal console, enter
cp ./ filename .key /mnt/ifolder3/sharedkey/
cp ./ filename .cert /mnt/ifolder3/sharedkey/
Replace
filename
with the actual file name of your
.key
and
.cert
files. Replace the
destination path with the location where you want to store the shared key and certificate files.