Changes between Version 17 and Version 18 of configure_new_server

Timestamp:

Nov 16, 2007, 3:32:07 PM (18 years ago)

Author:

Jamie McClelland

Comment:

--

configure_new_server

@@ -13 +13 @@
  * Change the domain@mayfirst.org email alias to point to your address.
 
- * Go to Godaddy (which is a thawte reseller) for server.mayfirst.org. This will take a day or so to be generated.
+ * Go to RapidSSL to purchase a certificate for server.mayfirst.org. This will take a day or so to be generated.
 
  * Concat the CRT and KEY file into a file called: server.mayfirst.org.pem (replace server with the name of the server being setup)
@@ -23 +23 @@
 }}}
 
- This file will be used by courier. Copy into /etc/courier/imapd.pem and /etc/courier/pop3d.pem
-
- * Now, put each one in a separate file called: server.mayfirst.org.key and server.mayfirst.org.crt (these will be used by apache)
+ * Copy into /etc/ssl/private/
+
+ * Copy the .crt file to /etc/ssl/
 
 == Use volatile for SA and clamav ==
@@ -349 +349 @@
 # otherwise. This is important because passwords are sent in the clear
 smtpd_tls_auth_only = yes
-smtpd_tls_key_file = /etc/postfix/ssl/SERVER.mayfirst.org.pem
-smtpd_tls_cert_file = /etc/postfix/ssl/SERVER.mayfirst.org.pem
+smtpd_tls_key_file = /etc/ssl/private/SERVER.mayfirst.org.pem
+smtpd_tls_cert_file = /etc/ssl/SERVER.mayfirst.org.crt
 smtpd_tls_received_header = yes
 smtpd_tls_session_cache_timeout = 3600s
@@ -457 +457 @@
 touch /etc/courier/index
 }}}
- * Setup ssl - copy the server pem file (which you got from dotster) to the /etc/courier directories:
-{{{
-cp server.mayfirst.org.pem /etc/courier/imapd.pem
-cp server.mayfirst.org.pem /etc/courier/pop3d.pem
-}}}
-
-If you are using Godaddy Certificates, copy the godaddy bundle to /etc/courier/ (you can download it here: http://mayfirst.org/node/452).
-
-Then add this line to both imapd-ssl and pop3d-ssl:
-
-{{{
-TLS_TRUSTCERTS=/etc/courier/gd_intermediate_bundle.crt
+ * Edit both imapd-ssl and pop3d-ssl:
+{{{
+TLS_CERTFILE=/etc/ssl/private/SERVER.mayfirst.org.pem
 }}}
 
@@ -582 +573 @@
  * Change:
 {{{
-<VirtualHost *> to: <VirtualHost *:80>
+<VirtualHost *:80>
 ServerAdmin apache@mayfirst.org
 DocumentRoot /srv/apache/web (create this directory and index.html file)
+}}}
+ * Add:
+{{{
+<VirtualHost *:443>
+        ServerName SERVER.mayfirst.org
+        ServerAlias www.SERVER.mayfirst.org
+        DocumentRoot /srv/apache/web
+        CustomLog /var/log/apache2/access.ssl.log combined
+        SSLEngine On
+        SSLCertificateFile /etc/apache2/ssl/SERVER.mayfirst.org.crt
+        SSLCertificateKeyFile /etc/apache2/ssl/SERVER.mayfirst.org.key
+        ErrorLog /var/log/apache2/error.log
+</VirtualHost>
 }}}