Changes between Version 2 and Version 3 of configure-mosh-x509

Timestamp:

Oct 1, 2013, 3:21:35 PM (11 years ago)

Author:

Ross

Comment:

--

configure-mosh-x509

@@ -25 +25 @@
    * d. You will recieve an validation email at hostmaster@mayfirst.org, validate it.
    * e. You will recieve the certificate at hostmaster@mayfirst.org in a zip file.
-   * f. save zip locally then on your local computer run 'scp /PATH/TO/SERVERNAME_mayfirst_org.zip root@SERVER_NAME.mayfirst.org:/etc/ssl/temp' to copy the zip file to the server.
-   * g. on the server 'unzip /etc/ssl/temp/SERVERNAME_mayfirst_org.zip'
-   * h. from /etc/ssl/temp on the host machine you can run 'cat PositiveSSLCA2.crt >> SERVERNAME_mayfirst_org.crt && mv SERVERNAME_mayfirst_org.crt ../SERVERNAME.mayfirst.org.crt.new' .  This will create the correct certificate for the /etc/ssl directory (including the intermediate certificate). You need both Intermediate and Primary certificates for apache to use ssl correctly.
-   * i. next from /etc/ssl/private do 'umask 177; cat SERVERNAME.mayfirst.org.key.$(date +%F) >> SERVERNAME.mayfirst.org.pem.new'
-   * j. next from /etc/ssl/private do 'cat ../SERVERNAME.mayfirst.org.crt.new >> SERVERNAME.mayfirst.org.pem.new; umask 133'
+   * f. save zip locally then on your local computer run command below to copy the zip file to the server.
+{{{
+scp /PATH/TO/SERVERNAME_mayfirst_org.zip root@SERVER_NAME.mayfirst.org:/etc/ssl/temp
+}}}
+ 
+   * g. on the server 
+{{{
+unzip /etc/ssl/temp/$(hostname)_mayfirst_org.zip
+}}}
+   * h. from /etc/ssl/temp on the host machine you can run 
+{{{
+cat PositiveSSLCA2.crt >> $(hostname)_mayfirst_org.crt && mv $(hostname)_mayfirst_org.crt ../$(hostname).mayfirst.org.crt.new' .  
+}}}
+    * This will create the correct certificate for the /etc/ssl directory (including the intermediate certificate). You need both Intermediate and Primary certificates for apache to use ssl correctly.
+   * i. next from /etc/ssl/private do 
+{{{
+umask 177; cat $(hostname).mayfirst.org.key.$(date +%F) >> $(hostname).mayfirst.org.pem.new
+}}}
+   * j. next from /etc/ssl/private do 
+{{{
+cat ../$(hostname).mayfirst.org.crt.new >> $(hostname).mayfirst.org.pem.new; umask 133
+}}}
    * k. Make sure no files in the /etc/ssl/private directory are readable by the world.
-   * l. from /etc/ssl do 'mv $(hostname).mayfirst.org.crt{,.old} && mv $(hostname).mayfirst.org.crt{.new,} && mv private/$(hostname).mayfirst.org.pem{,.old} && mv private/$(hostname).mayfirst.org.pem{.new,}'
-   * m. restart apache with 'service apache2 restart'
+   * l. from /etc/ssl do 
+{{{
+mv $(hostname).mayfirst.org.crt{,.old} && mv $(hostname).mayfirst.org.crt{.new,} && mv private/$(hostname).mayfirst.org.pem{,.old} && mv private/$(hostname).mayfirst.org.pem{.new,}
+}}}
+   * m. restart apache with 
+{{{
+service apache2 restart
+}}}
    * i. Check that the certificate is working by going to https://SERVERNAME.mayfirst.org
-   * n. restart courier-imap-ssl and courier-pop-ssl 'service courier-imap-ssl restart && service courier-pop-ssl restart'
+   * n. restart courier-imap-ssl and courier-pop-ssl 
+{{{
+service courier-imap-ssl restart && service courier-pop-ssl restart
+}}}
    * o. Remove any unnecessary files.  Here's an example of the needed files on jones (with permissions):