Koozali.org: home of the SME Server

Install third party cert

Agadak

Install third party cert
« on: December 27, 2002, 07:20:39 AM »
Hi all,

I have sort of a long post, any help or opinions would be appreciated. I have to install a 3rd party cert on a virtual domain from verisign. Their instructions are good, I'm sure, for a normal install, but for e-smith that wouldn't work. So I just want to verify a few things:

1. I think that what I have to do is create a new templates-custom directory w/ a sub directory called VirtualHosts since the template directory is:
/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts
and copy the 25SSLDirectives into the templates-custom directory.

2. The 25SSLDirectives has the following:
 my $customCrt = db_get_prop($confref, "modSSL", "crt");
        my $crt = $customCrt ? $customCrt :
                "/home/e-smith/ssl.crt/secure.${DomainName}.crt";
        my $customKey = db_get_prop($confref, "modSSL", "key");
        my $key = $customKey ? $customKey :
                "/home/e-smith/ssl.key/secure.${DomainName}.key";

 
which translates to my 'real' domain. which looks like this in httpd.conf:

  my $customCrt = db_get_prop($confref, "modSSL", "crt");
        my $crt = $customCrt ? $customCrt :
                "/home/e-smith/ssl.crt/secure.testdom.crt";
        my $customKey = db_get_prop($confref, "modSSL", "key");
        my $key = $customKey ? $customKey :
                "/home/e-smith/ssl.key/secure.testdom.key";

Can I just point it to "/usr/share/ssl/mykey.key and mysite.crt?"

and then restart Apache? Also, I have two extra files that ar supposed to be bundled, any idea where these go? They say they may not even be needed...but...

Thanks!