LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 09-10-2019, 08:17 AM   #1
dhar_bikramtm
LQ Newbie
 
Registered: Sep 2019
Posts: 12

Rep: Reputation: Disabled
Replace the SSL certificate to linux web server


Application guy gave me two .pem files for two sites.i will need to replace it in proper path in the web server .

Kindly help me step by step process to accomplish that.

my old certs are in the below path :::

/etc/httpd/certs/ServerCertificaatMKCPink.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/onsiteCA-2013.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2014.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/onsiteCA-2012.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/onsiteCA-2011.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2011.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2018.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2012.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2013.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2015.crt
/etc/httpd/certs/mijnklantcontact-2015.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2012.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2014.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2015.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2018.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2010.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2013.crt
/etc/pki/tls/certs/ca-bundle.trust.crt
/etc/pki/tls/certs/localhost.crt
/etc/pki/tls/certs/ca-bundle.crt
/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
/usr/share/pki/ca-trust-source/ca-bundle.neutral-trust.crt
/usr/share/pki/ca-trust-source/ca-bundle.trust.crt
/usr/local/src/perl/libapreq2-2.13/module/t/conf/ssl/ca-bundle-duplicates.crt
/usr/local/src/perl/libapreq2-2.13/module/t/conf/ssl/ca-bundle-sample.crt
/opt/conf/server.crt

i know how to convert file from .pem to .crt .But bit confused where will we actually place the .crt file

Kindly need your help
 
Old 09-10-2019, 08:50 AM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 21,824

Rep: Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775
Quote:
Originally Posted by dhar_bikramtm View Post
Application guy gave me two .pem files for two sites.i will need to replace it in proper path in the web server. Kindly help me step by step process to accomplish that.

my old certs are in the below path :::

/etc/httpd/certs/ServerCertificaatMKCPink.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/onsiteCA-2013.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2014.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/onsiteCA-2012.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/onsiteCA-2011.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2011.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2018.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2012.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2013.crt
/etc/httpd/certs/mijnklantcontact.kpn.com/mijnklantcontact-2015.crt
/etc/httpd/certs/mijnklantcontact-2015.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2012.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2014.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2015.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2018.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2010.crt
/etc/httpd/certs/callmenow.callmenow.nl/callmenow-2013.crt
/etc/pki/tls/certs/ca-bundle.trust.crt
/etc/pki/tls/certs/localhost.crt
/etc/pki/tls/certs/ca-bundle.crt
/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
/usr/share/pki/ca-trust-source/ca-bundle.neutral-trust.crt
/usr/share/pki/ca-trust-source/ca-bundle.trust.crt
/usr/local/src/perl/libapreq2-2.13/module/t/conf/ssl/ca-bundle-duplicates.crt
/usr/local/src/perl/libapreq2-2.13/module/t/conf/ssl/ca-bundle-sample.crt
/opt/conf/server.crt

i know how to convert file from .pem to .crt .But bit confused where will we actually place the .crt file Kindly need your help
You don't tell us the version/distro of Linux you're using, version of Apache, or what you've done/tried/researched so far.

Your 'application guy' may be able to help you, but if you're the systems administrator, then where did YOU set your system up to look for these things??? These things are defined in your Apache/SSL setup, and where you tell things to go look.
 
Old 09-10-2019, 09:30 AM   #3
dhar_bikramtm
LQ Newbie
 
Registered: Sep 2019
Posts: 12

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by TB0ne View Post
You don't tell us the version/distro of Linux you're using, version of Apache, or what you've done/tried/researched so far.

Your 'application guy' may be able to help you, but if you're the systems administrator, then where did YOU set your system up to look for these things??? These things are defined in your Apache/SSL setup, and where you tell things to go look.
distro :

Linux mkc-web 2.6.32-431.11.2.el6.x86_64 #1 SMP Tue Mar 25 19:59:55 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

apache version :

Server version: Apache/2.2.15 (Unix)
Server built: Apr 3 2014 23:56:16

i didnt do anything till now just google how to convert files.Kindly help
 
Old 09-10-2019, 09:38 AM   #4
dc.901
Member
 
Registered: Aug 2018
Location: Atlanta, GA - USA
Distribution: CentOS 6-7; SuSE 8-12
Posts: 599

Rep: Reputation: 173Reputation: 173
Quote:
Originally Posted by dhar_bikramtm View Post
distro :

Linux mkc-web 2.6.32-431.11.2.el6.x86_64 #1 SMP Tue Mar 25 19:59:55 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

apache version :

Server version: Apache/2.2.15 (Unix)
Server built: Apr 3 2014 23:56:16

i didnt do anything till now just google how to convert files.Kindly help
Did you not build this machine and configured Apache?
If Apache was installed from repo, then config files should be under /etc/httpd/
You can look at the config files for location of cert files.
 
Old 09-10-2019, 09:45 AM   #5
dhar_bikramtm
LQ Newbie
 
Registered: Sep 2019
Posts: 12

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by dc.901 View Post
Did you not build this machine and configured Apache?
If Apache was installed from repo, then config files should be under /etc/httpd/
You can look at the config files for location of cert files.


no i didnt configure it and handling first time apache.these are the conf file .

/etc/httpd/conf.d/proxy_ajp.conf
/etc/httpd/conf.d/jk_ajp.conf
/etc/httpd/conf.d/squid.conf
/etc/httpd/conf.d/ssl.conf
/etc/httpd/conf.d/perl.conf
/etc/httpd/conf.d/welcome.conf
/etc/httpd/conf.d/php.conf
/etc/httpd/conf/extra/httpd-mijnklantcontact.conf
/etc/httpd/conf/extra/httpd-ssl-callmenow444.conf
/etc/httpd/conf/extra/httpd-ssl-mijnklantcontact444.conf
/etc/httpd/conf/extra/httpd-ssl-mijnklantcontact_bkp.conf
/etc/httpd/conf/extra/httpd-ssl-callmenow.conf
/etc/httpd/conf/extra/httpd-ssl-callmenow_bkp.conf
/etc/httpd/conf/extra/httpd-ssl-mijnklantcontact.conf
/etc/httpd/conf/extra/httpd-callmenow.conf
/etc/httpd/conf/httpd.conf

kindly tell me which is the original file and metric need to check in it for location of the cert files
 
Old 09-10-2019, 09:48 AM   #6
dc.901
Member
 
Registered: Aug 2018
Location: Atlanta, GA - USA
Distribution: CentOS 6-7; SuSE 8-12
Posts: 599

Rep: Reputation: 173Reputation: 173
Quote:
Originally Posted by dhar_bikramtm View Post
no i didnt configure it and handling first time apache.these are the conf file .

.....
/etc/httpd/conf.d/ssl.conf
.....
Start with ssl.conf. Look at that file to determine location for Apache certs.

Did the previous admin not give you any documentation on the build?
 
Old 09-10-2019, 09:53 AM   #7
dhar_bikramtm
LQ Newbie
 
Registered: Sep 2019
Posts: 12

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by dc.901 View Post
Start with ssl.conf. Look at that file to determine location for Apache certs.

Did the previous admin not give you any documentation on the build?

no i didnt get ant sop. i checked the file only these 3 line are commented out

LoadModule ssl_module modules/mod_ssl.so
Listen sntws1-ext-65:443
Listen sntws1-ext-66:443

what line i need to check for location of certs
 
Old 09-10-2019, 10:02 AM   #8
dc.901
Member
 
Registered: Aug 2018
Location: Atlanta, GA - USA
Distribution: CentOS 6-7; SuSE 8-12
Posts: 599

Rep: Reputation: 173Reputation: 173
Quote:
Originally Posted by dhar_bikramtm View Post
i checked the file only these 3 line are commented out
You need to review un-commented lines.

Perhaps, also read the documentation on Apache site:
https://httpd.apache.org/docs/2.2/ssl/ssl_howto.html

Here is a good example:
https://www.namecheap.com/support/kn...cate-on-apache
 
1 members found this post helpful.
Old 09-10-2019, 10:33 AM   #9
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 21,824

Rep: Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775Reputation: 5775
Quote:
Originally Posted by dhar_bikramtm View Post
no i didnt configure it and handling first time apache.these are the conf file .

/etc/httpd/conf.d/proxy_ajp.conf
/etc/httpd/conf.d/jk_ajp.conf
/etc/httpd/conf.d/squid.conf
/etc/httpd/conf.d/ssl.conf
/etc/httpd/conf.d/perl.conf
/etc/httpd/conf.d/welcome.conf
/etc/httpd/conf.d/php.conf
/etc/httpd/conf/extra/httpd-mijnklantcontact.conf
/etc/httpd/conf/extra/httpd-ssl-callmenow444.conf
/etc/httpd/conf/extra/httpd-ssl-mijnklantcontact444.conf
/etc/httpd/conf/extra/httpd-ssl-mijnklantcontact_bkp.conf
/etc/httpd/conf/extra/httpd-ssl-callmenow.conf
/etc/httpd/conf/extra/httpd-ssl-callmenow_bkp.conf
/etc/httpd/conf/extra/httpd-ssl-mijnklantcontact.conf
/etc/httpd/conf/extra/httpd-callmenow.conf
/etc/httpd/conf/httpd.conf

kindly tell me which is the original file and metric need to check in it for location of the cert files
This and your other posts seem to indicate that you're trying to do the job of an administrator, but don't have any knowledge of how to do the job. Again, as you were told, the config files (as dc.901 said, the ssl.conf file) have locations for these things defined. LOOK AT THEM, and it will tell you. If they're not there, YOU will have to do some work to configure these things.

If you're trying to configure multiple sites with multiple security certificates, that's going to be a bit involved. We aren't going to write up a step-by-step guide for you on how to do the job you were hired to do. If you're stuck, it would be best if you told your boss that this isn't something you can do easily, and to get someone to help you.
 
1 members found this post helpful.
Old 09-10-2019, 01:47 PM   #10
scasey
Senior Member
 
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.6
Posts: 3,635

Rep: Reputation: 1206Reputation: 1206Reputation: 1206Reputation: 1206Reputation: 1206Reputation: 1206Reputation: 1206Reputation: 1206Reputation: 1206
Update the relevant apache config files...I have one config file for each secure domain in the /etc/httpd/conf.d directory, but that may not be how your setup is done. You will need to figure out where the SSLCertificate* settings are configured in your installation and edit those.

As has been said, if you don't know how or what to update within your config files, you should seek help from within your organization; an error in a config file can keep the apache server from starting up at all.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Fetchmail and Server certificate verification error: unable to get local issuer certificate Mr486 Linux - Software 2 08-12-2018 08:20 AM
SSL certificate generation question - No certificate matches private key etcetera Linux - General 1 04-10-2017 01:28 PM
How to import/use CAcert SSL root certificate to use SSL with Xchat IRC client? GrapefruiTgirl Linux - Software 9 04-05-2011 09:54 AM
Apache with SSL does not load the 2nd SSL certificate janstapel Linux - Newbie 1 06-17-2010 09:32 PM
create ssl web certificate cccc Linux - Security 5 02-11-2009 08:04 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 05:40 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration