Sysadmin/SSL Certificates: Difference between revisions
| (7 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
We use StartCom's StartSSL for our certificates. | We use StartCom's StartSSL for our certificates. | ||
# Generate a key and a CSR: (we use <code>-batch</code> because StartSSL ignores everything but the public key in the CSR)<br/><code | # Generate a key and a CSR: (we use <code>-batch</code> because StartSSL ignores everything but the public key in the CSR)<br/><code>openssl req -batch -new -keyout CNAME.sugarlabs.org.key -out CNAME.sugarlabs.org.csr</code> | ||
# Log into the [https://startssl.com/ StartSSL control panel]. | # Log into the [https://startssl.com/ StartSSL control panel]. | ||
# If you need to reconfirm access to the Sugar Labs domain (which is required every 30 days), do the following: | # If you need to reconfirm access to the Sugar Labs domain (which is required every 30 days), do the following: | ||
| Line 18: | Line 18: | ||
Use the [https://www.ssllabs.com/ssldb/analyze.html?d=www.sugarlabs.org SSL validator] to verify the new certificate and web server configuration (NOTE: the validator doesn't seem to support SNI). | Use the [https://www.ssllabs.com/ssldb/analyze.html?d=www.sugarlabs.org SSL validator] to verify the new certificate and web server configuration (NOTE: the validator doesn't seem to support SNI). | ||
== Sites == | |||
* [[Service/chat|chat.sugarlabs.org]] | |||
* [[Service/git|git.sugarlabs.org]] | |||
* [[Service/cas|cas.sugarlabs.org]] | |||
* [[Service/obs|obs.sugarlabs.org]] | |||
* [[Service/obs|packages.sugarlabs.org]] | |||
* ''add sites you maintain'' | |||