Service manual

177Appendix H Certificate For HTTP Security
Cyclades-TS Installation & Service Manual
The other requested information can be skipped.
• The certificate signing request (CSR) generated by the command above contains some personal (or corporate)
information and its public key. The next step is to submit the CSR and some personal data to the CA. This
service can be requested by accessing the CA website and is not free, and there is a list of CA’s in the URL
http://www.pki-page.org/.
• The request will be analyzed by the CA, for policy approval and to be signed.
• After the approval, the CA will send a certificate file to the origin, which we will call Cert.cer, for example
purposes. The certificate is also stored on a directory server.
• The certificate must be installed in the GoAhead web server, by following these instructions:
1. Open a Cyclades Terminal Server session and do the login.
2. Load the files Cert.cer (certificate file received from the CA) and private.key (private key generated
by openssl) to a temporary directory (/tmp), using FTP or NFS service.
3. Join the certificate with the private key into the file
/web/server.pem.
#cat Cert.cer private.key > /web/server.pem
4. Copy the certificate to the file
/web/cert.pem
#cp Cert.cer /web/cert.pem
5. Include the files /web/server.pem and /web/cert.pem in /etc/config_files.