?
Solved

replace the test cert with a commercial one (mod_ssl)

Posted on 2004-08-10
3
Medium Priority
?
327 Views
Last Modified: 2010-03-04
hi folks,

i've installed a test cert for SSL on Apache 2.0.45 for Windows 2k, by creating a key, creating a CSR and then installing a temporary test cert. i've used mod_ssl 2.0.48. i followed the steps outlined in:
http://www.devx.com/opensource/Article/20085
and i now have 2 mydomain.crt files, 2 mydomain.key files and one mydomain.csr files, in the \ssl and \bin directories.

now i want to change the test cert for SSL to a commercial cert (Entrust).

do i just remove the existing .csr, .crt and .key files (should i also roll back changes in the httpd.conf, openssl.conf etc.), do i just create new key & csr files ignoring the existing setup, or can anybody point me in the right direction to go about replacing my test cert setup with the commercial one?
0
Comment
Question by:gdoherty
3 Comments
 
LVL 1

Accepted Solution

by:
justywong earned 450 total points
ID: 11770612
For Unix/Linux version,

assume your $APACHE_HOME = /usr/local/apache2

you can just copy the new cert & key files (name different from old cert and key)  to
  $APACHE_HOME/conf/ssl.key & ssl.crt

and modify the $APACHE_HOME/conf/ssl.conf to point to your new key & cert file.
e.g.
(old key & cert):
SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/test_server.key
SSLCertificateFile /usr/local/apache2/conf/ssl.crt/test_server.crt
(new key & cert):
SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/prod_server.key
SSLCertificateFile /usr/local/apache2/conf/ssl.crt/prod_server.crt

remember to backup your ssl.conf before making change. you can just recover the ssl.conf in case you need to rollback.
0
 

Author Comment

by:gdoherty
ID: 11771110
many thanks - wouldn't have thought of that, but it makes sense.

that said, i'm using windows 2k - can anyody out there let me know is there anything else that i need to do on w2k/apache/mod_ssl before justywong gets the points?

thanks,
0
 
LVL 51

Assisted Solution

by:ahoffmann
ahoffmann earned 300 total points
ID: 11771727
> do i just remove the existing .csr, .crt and .key files
yes
> (should i also roll back changes in the httpd.conf, openssl.conf etc.)
not necessary

to do it save and have a working backup, you may install your certs/keys in e new directory, and then change httpd.conf (see previous suggestion), but IMHO that's more error-prone than replaceing 2 files
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As Wikipedia explains 'robots.txt' as -- the robot exclusion standard, also known as the Robots Exclusion Protocol or robots.txt protocol, is a convention to prevent cooperating web spiders and other web robots from accessing all or part of a websit…
It is possible to boost certain documents at query time in Solr. Query time boosting can be a powerful resource for finding the most relevant and "best" content. Of course the more information you index, the more fields you will be able to use for y…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses
Course of the Month8 days, 19 hours left to enroll

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question