Date:  Sat, 31 Mar 2007 08:48:47 -0700
From:  "Nick Baba" <dr.polo (at mark) cox.net>
Subject:  [coba-e:09402] Re: Need to Locate CSR
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <024301c773ac$122740c0$640b0b0a@trektop>
In-Reply-To:  <FHEKIOOCILPGHFNHGDFAEEAJEJAA.bob (at mark) isitservices.com>
References:  <01c401c772f9$04f337a0$640b0b0a (at mark) trektop> <FHEKIOOCILPGHFNHGDFAEEAJEJAA.bob (at mark) isitservices.com>
X-Mail-Count: 09402

I checked there before I bothered the list and that is not the location-it
may have been for the Cobalt servers though.

 

For BlueQuarts I actually did find the main box ssl files set up via the gui
at this location:

 

/etc/httpd/conf

 

This is where the gui puts the ssl.crl, ssl.crt, ssl.csr, ssl.key, and
ssl.prm, plus a vhosts directory which may be the location for the ssl files
for the virtual sites.

 

Now I already generated a csr via command line at a different location in
the file structure and sent the info off to a signing authority that will be
sending a signed certificate.

 

My questions now for whoever wishes to answer are:

 

1)    Shall I delete the ssl.crt, ssl.key, and ssl.csr files generated by
the GUI entirely and they will be regenerated or just the contents of each?
I should probably make back ups of these in the same directory just in case
even though these files are not the one generated by the command line and
the csr file is not the right one - not the one that I sent to the signing
authority.

2)    Is this the location to manually put the correct csr and key files,
and the new cert. when I get it? Or will the certificate import feature of
the GUI prompt me to put these files in during the import phase when
importing a certificate through the GUI?
I really am worried about using the GUI.

 

Thanks!

                   Nick Baba

                    <mailto:dr.polo (at mark) cox.net> dr.polo (at mark) cox.net 

                   cell: 949.689.0500

  _____  

From: ISIT Services [mailto:bob (at mark) isitservices.com] 
Sent: Friday, March 30, 2007 11:47 PM
To: coba-e (at mark) bluequartz.org
Subject: [coba-e:09401] Re: Need to Locate CSR

 

Should be in the sites directory under certs if I remeber correctly.

-----Original Message-----
From: Nick Baba [mailto:dr.polo (at mark) cox.net]
Sent: 30 March 2007 19:27
To: coba-e (at mark) bluequartz.org
Subject: [coba-e:09390] Need to Locate CSR

I am trying to install SSL certificates on two servers running BlueQuartz
with the Nuonce security packages.

 

Thru the GUI I went through the process of creating the CSR's (Certificate
Signing Requests).

 

These are not for virtual sites but for the main domain on each server.

 

I am only able to export the RSA private key and the intermediate
certificate creates thru the GUI.

 

Where in the heck is the CSR in the file structure? There seems to be no way
to get this from the GUI thru IE7.

 

If I try again using FireFox then I get a serial number error for the
self-generated intermediate certificate and I get locked out of the server
forever if using Firefox!

 

I would imagine that creating another certificate tomorrow might change the
serial number and let me in but I cannot be certain.

 

Can anyone please advise? 

 

Thanks!

                   Nick Baba

                    <mailto:dr.polo (at mark) cox.net> dr.polo (at mark) cox.net 

                   cell: 949.689.0500

 


	
9402_2.html (attatchment)(tag is disabled)