Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 08-17-2009, 02:19 PM   #1
LQ Newbie
Registered: Aug 2009
Posts: 1

Rep: Reputation: 0
Created CSR got certificate back now what?

We have an existing web site and the SSL cert. is about to expire. I created a CSR and sent it to a third party and received their cert. I google'd some sites for how to install and I get mixed results. I best is one that has me copy in the new encryption into server.crt and then perform what is listed below. One, since I have a running site do I need to perform what is below or just restart apache after creating the new server.crt? If not, I do not know what the

PEM format Bundled CA certificate file (full CA chain)



In the Virtual Host settings for your site, in the httpd.conf file, you will need to complete the following:

1. Copy the PEM format Bundled CA certificate file (full CA chain) to the directory in which ca-bundled files are stored e.g. /etc/httpd/conf/ssl.crt/
2. Add the following line to the SSL section of the httpd.conf (assuming /etc/httpd/conf/ssl.crt/ is the directory to where you have copied the CA Bundle file). if the line already exists amend it to read the following:

SSLCACertificateFile /etc/httpd/conf/ssl.crt/cachainpem.txt

If you are using a different location and certificate file names you will need to change the path and filename to reflect your server.

The SSL section of the updated httpd config file should now read something similar to this example (depending on your naming and directories used):

SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt

SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key

SSLCACertificateFile /etc/httpd/conf/ssl.crt/cachainpem.txt

Save your httpd.conf file and restart Apache.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
create a csr for tomato watcher69b Linux - Networking 0 02-03-2009 09:01 PM
Building a certificate chain from the certificate using openSSL aravinda78 Linux - Security 1 11-10-2008 02:51 AM
Can I retrieve certificate expiry date from an openssl certificate (command line) davee Linux - Security 1 07-21-2006 11:28 AM
Generating a CSR shaggz Linux - General 1 01-31-2003 12:56 PM
Problem generating CSR chr15t0 Linux - Security 0 12-31-2002 04:28 PM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 07:18 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration