/
SSL certs (Obsolete)

SSL certs (Obsolete)


Generate key and csr

sudo su
cd /etc/ssl
# generate the passworded key (use an easy password; we're about to strip it)
openssl genrsa -des3 -out server.pass.key 2048
# strip the password (you can now delete server.pass.key)
openssl rsa -in server.pass.key -out server.key
# generate the csr
openssl req -newkey rsa:2048 -nodes -sha256 -keyout server.key -out server.csr

-----

Country Name (2 letter code) [AU]:US

State or Province Name (full name) [Some-State]:Pennsylvania

Locality Name (eg, city) []:Philadelphia

Organization Name (eg, company) [Internet Widgits Pty Ltd]:Chemical Heritage Foundation

Organizational Unit Name (eg, section) []:Library

Common Name (e.g. server FQDN or YOUR name) []:hydra.chemheritage.org

Email Address []:


Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:

An optional company name []:


mv server.key private/
mv server.pass.key private/
cd private
chown root:ssl-cert server.*
chmod 640 server.*

Generally it's better to name the key and csr after the server itself, e.g. hydra-chemheritage-org.csr; you can rename them after creation.

referenced:

Generate self-signed cert

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

Purchasing a godaddy cert for prod

Email the csr to Chuck / Ponce and ask them to buy you a cert. Specify number of years

Installing the cert


Forcing all traffic to SSL

Until Ansible script is adjusted, manually add

redirect / https://hydra.chemheritage.org just below Document Root in /etc/apache2/sites-enabled/sufia-project.conf


Related content

DNS and SSL and CNAME management for Heroku sites
DNS and SSL and CNAME management for Heroku sites
More like this
Heroku developer setup
Heroku developer setup
More like this
SearchStax Solr
More like this
Heroku Operational Components Overview
Heroku Operational Components Overview
More like this
Rebuilding production (Obsolete)
Rebuilding production (Obsolete)
More like this
Postgres Export/Import (Obsolete)
Postgres Export/Import (Obsolete)
More like this