User`s guide

Administering Security Certificates for HTTPS and SSH on the OnSite
528
AlterPath OnSite Administrator’s and User’s Guide
The following screen example uses cert.crt as the name of the
certificate file and private_key.pem as the name of the private key
file.
3. Copy the CA-signed certificate again, this time into the file named
/etc/CA
/server.crt.
The following screen example uses cert.crt as the name of the
certificate file. Substitute the correct name for the certificate file.
4. Make sure the files where you store the server key and certificate are
listed in/etc/config_files.
Note: By default /etc/CA/server.pem and /etc/CSA/cert.pem
are listed in/etc/config_files.
5. Restart the web server to put the certificate into effect.
Enabling SSH to Use X.509 Certificates
The OpenSSH software included with the OnSite has support for X.509
certificates. This section provides the following:
• The prerequisites for enabling and using X.509 certificates for SSH
authentication
• The tasks
[root@OnSite /root]# cat cert.crt private_key.pem > \
/etc/CA/server.pem
[root@OnSite /root]# cat cert.crt > /etc/CA/server.pem
[root@OnSite /root]# daemon.sh restart WEB