Create a bundle of certificates

This commit is contained in:
Bob Mottram 2014-09-13 11:22:32 +01:00
parent f2c41e77e9
commit e88da5662e
1 changed files with 17 additions and 0 deletions

View File

@ -2648,6 +2648,15 @@ openssl req \
-out /etc/ssl/certs/$HOSTNAME.crt
chmod 400 /etc/ssl/private/$HOSTNAME.key
/etc/init.d/nginx reload
# add the public certificate to a separate directory
# so that we can redistribute it easily
if [ ! -d /etc/ssl/mycerts ]; then
mkdir /etc/ssl/mycerts
fi
cp /etc/ssl/certs/$HOSTNAME.crt /etc/ssl/mycerts
# Create a bundle of your certificates
cat /etc/ssl/mycerts/*.crt > /etc/ssl/freedombone-bundle.crt
#+END_SRC
Save and exit.
@ -8237,6 +8246,14 @@ Create a bundled certificate which joins the certificate and chain file together
cat /etc/ssl/certs/$HOSTNAME.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem > /etc/ssl/certs/$HOSTNAME.bundle.crt
#+END_SRC
And also add it to the overall bundle of certificates for the BBB. This will allow you to easily install the certificates onto other systems.
#+BEGIN_SRC: bash
mkdir /etc/ssl/mycerts
cp /etc/ssl/certs/$HOSTNAME.bundle.crt /etc/ssl/mycerts
cat /etc/ssl/mycerts/*.crt > /etc/ssl/freedombone-bundle.crt
#+END_SRC
Edit your configuration file.
#+BEGIN_SRC: bash