Create a bundle of certificates
This commit is contained in:
parent
f2c41e77e9
commit
e88da5662e
|
@ -2648,6 +2648,15 @@ openssl req \
|
||||||
-out /etc/ssl/certs/$HOSTNAME.crt
|
-out /etc/ssl/certs/$HOSTNAME.crt
|
||||||
chmod 400 /etc/ssl/private/$HOSTNAME.key
|
chmod 400 /etc/ssl/private/$HOSTNAME.key
|
||||||
/etc/init.d/nginx reload
|
/etc/init.d/nginx reload
|
||||||
|
|
||||||
|
# add the public certificate to a separate directory
|
||||||
|
# so that we can redistribute it easily
|
||||||
|
if [ ! -d /etc/ssl/mycerts ]; then
|
||||||
|
mkdir /etc/ssl/mycerts
|
||||||
|
fi
|
||||||
|
cp /etc/ssl/certs/$HOSTNAME.crt /etc/ssl/mycerts
|
||||||
|
# Create a bundle of your certificates
|
||||||
|
cat /etc/ssl/mycerts/*.crt > /etc/ssl/freedombone-bundle.crt
|
||||||
#+END_SRC
|
#+END_SRC
|
||||||
|
|
||||||
Save and exit.
|
Save and exit.
|
||||||
|
@ -8237,6 +8246,14 @@ Create a bundled certificate which joins the certificate and chain file together
|
||||||
cat /etc/ssl/certs/$HOSTNAME.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem > /etc/ssl/certs/$HOSTNAME.bundle.crt
|
cat /etc/ssl/certs/$HOSTNAME.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem > /etc/ssl/certs/$HOSTNAME.bundle.crt
|
||||||
#+END_SRC
|
#+END_SRC
|
||||||
|
|
||||||
|
And also add it to the overall bundle of certificates for the BBB. This will allow you to easily install the certificates onto other systems.
|
||||||
|
|
||||||
|
#+BEGIN_SRC: bash
|
||||||
|
mkdir /etc/ssl/mycerts
|
||||||
|
cp /etc/ssl/certs/$HOSTNAME.bundle.crt /etc/ssl/mycerts
|
||||||
|
cat /etc/ssl/mycerts/*.crt > /etc/ssl/freedombone-bundle.crt
|
||||||
|
#+END_SRC
|
||||||
|
|
||||||
Edit your configuration file.
|
Edit your configuration file.
|
||||||
|
|
||||||
#+BEGIN_SRC: bash
|
#+BEGIN_SRC: bash
|
||||||
|
|
Loading…
Reference in New Issue