Topic: Installing Certificate from ipsCA on SME

[tspoon1986]

Hi,

I'm after a bit of advice in regards to installing a certificate from a third party on SME Server. I don't know a whole heap about certificates, so I'm learning as I go.

Currently we use the default self-signed certificate, but I'd like to get a proper commercial one. The company http://certs.ipsca.com/ provides certificates for free to educational institutions (like ours).

Having read the info that I can find about certificates on SME, it seems I need the .crt and .key files from ipsCA and I need to place them in /home/e-smith, and run the

Code: [Select]

config setprop modSSL crt /home/e-smith/ssl.crt/{domain}.crt
config setprop modSSL key /home/e-smith/ssl.key/{domain}.key
commands. Seems straightforward.

However, ipsCA requires that I submit a Certificate Request before I get a certificate from them. They have instructions for how to do this on other platforms, for example, Red Hat: http://certs.ipsca.com/Support/CSRRedHatLinux.asp

I notice openssl is installed on SME. Is the above process written for Red Hat likely to work for SME, or will it be different for different platforms?

In addition, ipsCA states that I need to install two additional certificates for "correct SSL connections" to be made. http://certs.ipsca.com/Support/SSLServerSUPPORT.asp Is it necessary or even possible to install these additional certificates for SME?

I realise these enquiries are really outside the bounds of Contribs.org's responsibility, but if anyone's willing to offer me advice anyway I'd really appreciate it!

Thanks,
tspoon1986.

[crazybob]

Have a look at http://wiki.contribs.org/Custom_CA_Certificate. It has a script for generating the cert request.

[tspoon1986]

Thanks crazybob, wasn't sure if that would apply because it was written for a different certificate provider. I'll give it a go.