Difficulty getting UCC Certificate installed?

acschnabel · 10-01-2011, 05:14 AM

How difficult is it to get a CSR and Private key for a UCC certificate (4 domains on it)?

The previous cert got revoked when we added a new subdomain to it. I've had 2 different people, who are supposed to be pretty descent with this kind of thing, taking several hours trying to get it right.

Server is CentOs5. What extra steps are needed to ensure the UCC works that aren't required when installing a standard cert?

Thanks.
Tony.

rustek · 10-01-2011, 01:14 PM

We just got done doing that on an ubuntu server.

I found the help by Greg Rowe very helpful.
http://therowes.net/~greg/2008/01/08...ple-hostnames/

I didn't follow his instructions exactly so I can't verify his commands.

I made a directory to work in, and from that directory;

I made a key with

Code:

openssl genrsa -rand /var/log/syslog -out ./svr.key 4096

I then put a copy of /etc/ssl/openssl.cnf in my working directory and called it ssl.cnf so I could edit and use it instead of changing the default.

I altered my ssl.cnf using Greg's instructions then I generated my csr with;

Code:

openssl req -new -key ./svr.key -out ./svr.csr -config ssl.cnf

You can look at the generated csr with;

Code:

openssl req -text -noout -in svr.csr

Russ