----- Original Message ----- From: Jim Dory On 1/7/2011 10:51 PM, Doug Harvey wrote: Hey Jim. I had issues with installing certs on BQ, so this will be an interesting read.
Doug On Fri, Jan 7, 2011 at 12:04 PM, Jim Dory <[email protected]> wrote: Hoping someone can offer some advice or answers to installing a wild card SSL certificate. Might not be much of a read as no one has really offered anything yet. One guy suggested offlist not doing a wildcard - and that may be the direction I go. Maybe I'll just do a regular one for webmail.nomealaska.org. The GUI has a way to create a request and to install certs, so perhaps I'll try that first. If it doesn't work I'll try whatever other methods I find online - not many specific to BlueOnyx. I did install one just a bit over a year ago but didn't take good notes on how I did it. Assuming you were eventually successful? Any caveats to share? /jd -- Jim Dory >> Jim >From the comand line, for the siteadmin ssl, the method I use is cd /etc/admserv openssl req -new -newkey rsa:2048 -keyout key -nodes -out request Generating a 2048 bit RSA private key ..........................................+++ ..............+++ writing new private key to 'key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [GB]:US State or Province Name (full name) [Berkshire]:California Locality Name (eg, city) [Newbury]:Valley Center Organization Name (eg, company) [My Company Ltd]:Precision Web Hosting, Inc. Organizational Unit Name (eg, section) []:WebDev Common Name (eg, your name or your server's hostname) []:*.secure-access.net Email Address []:[email protected] Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []: ? ? cat request The "request" is the CSR. After you get the certificate then I copy in the cerfiticate, key, and request to the certs directory. Then from the GUI, import the certificate 2, certificate 1, then root cert in that order. ---- Ken M Precision Web Hosting, Inc. http://www.precisionweb.net _______________________________________________ Blueonyx mailing list [email protected] http://www.blueonyx.it/mailman/listinfo/blueonyx
