Linux

How to install an SSL Certificate from Godaddy onto your SME Server

Posted on Updated on

This is my attempt at documenting my experience on renewing an installed SSL Certificate, generated by Godaddy, onto an SME server, release 7.5.1.

Go to a shell prompt on your SME server, and get into a familiar location, such as /home/e-smith.

Generate a 2048-bit RSA Private key, because as processing power of computers increases, 1024-bit private keys will be broken by the end of 2011 – in one month’s time! Run this command: 

# openssl req -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

This will bring up a shell based dialog where you add details of your domain. When its done, it will create two files in the location in which you have been working. so look out for yourdomain.key and yourdomain.csr files.

If your server (like mine) has no GUI, use scp to copy these 2 files to another location, the same location you will use to access your account at godaddy.com website. Otherwise, use any filemanager to locate the 2 files, and open the yourdomain.csr file.

In your godaddy account, Click on Certificates, and when your certificate is listed, select it. The menus at the top should now become active. Click on Re-key.

In the dialog box that opens, paste in the contents of yourdomain.csr file. Be sure to select GoDaddy as your Certificate Issuing Organization, before clicking on the black Re-Key button at the bottom. 

A new certificate will be created for your domain. Select it using the checkbox, and click on Download. Your browser should download a zip file, same name as your domain. Save this to the desktop, or anywhere you can easily trace it when you get back to the commandline shell. The download will include 2 files: gd_bundle.crt and yourdomain.crt.

 Extract these into folder named CERT (folder name is optional, does not have to be very specific).

Copy (or move, although i prefer to keep a copy elsewhere) these 2 files to the location on the server where the yourdomain.key and yourdomain.csr files are already located. In my case:

# cd /home/e-smith

# scp user@machinewithgui:/home/user/Desktop/CERT/* .  //// unless yo a commandline pro, this dot is intentional!

Optional: Use scp or putty or any client to drop a copy of the files created by the open ssl command, into the CERT folder on the machien with GUI.

This will ensure that you have 4 new files in each of the 2 locations. the 4 files should be:

yourdomain.key, yourdomain.csr, yourdomain.crt, gd_bundle.crt.

Now we need to move our files into the rightful locations. To do this, copy yourdomain.crt into /home/e-smith/ssl.crt/ and yourdomain.key into /home/e-smith/ssl.key/

Also, do copy gd_bundle.crt into /usr/share/ssl/certs/

The SME Server now needs to be told about your new certificate, and the key that was used to generate it. To do this, run these commands: 

# config setprop modSSL crt /home/e-smith/ssl.crt/yourdomain.crt

# config setprop modSSL key /home/e-smith/ssl.key/yourdomain.key

Be sure to delete the existing PEM file, as a new one will be created anyway. Run this command:

# rm /home/e-smith/ssl.pem/yourdomain.pem

Finally, run this command:

# signal-event post-upgrade; singal-event reboot

 

Please do let me know if this helps you in anyway. 

Advertisements

Linux Mascots…

Posted on Updated on

  I love this one. innocent, mild, encouraging, says u can have me, and i will grow up later, but u gotta know this,i got “linux inside”. Kinda like that deceitful look u get of my old server box, dusty, even rusty, the fans raving like my car engine, yet it goes about its crons year in year out…never complaining, because its got…linux inside.

   There is somethin interesting about this one. Ugandan president has a signature hat he wears, so i wonder if the president knows a thing about Linux. There is somethin oriental about this mascot, my early TV days revealed that everyone vietnamese or Filipino owns a large hat! This mascot is relaxed, smiling, clearly enjoying Linux. Even has the time to sit, and hold a glass…

So what does the mascot say to you?

Genesis – Take 2

Posted on Updated on


1. In the beginning GOD created the Bit and the Byte. And from
those he created the Word.

2. And there were two Bytes in the Word; and nothing else existed.
And God separated the One from the Zero; and he saw it was
good.

3. And God said – Let the Data be; And so it happened.
And God said – Let the Data go to their proper places.
And he created floppy disks and hard disks and compact disks.

Read the rest of this entry »

When LUG came to IHSU

Posted on Updated on

Today, i was happy to host the Linux User Group at IHSU. This is what happened here. Its quite a small thing for me running all this Ubuntu, but the raves and uhmms i heard while the IHSU Tour of facilities happened was really something of an encouragement.

IHSU will be happy to show anyone around, what it means to run/power a University with Open Source Software!

LUG Rocks, and we were happy to host you at IHSU. Come back soon.