Changes

Jump to navigation Jump to search
Line 1: Line 1:  
We use StartCom's StartSSL for our certificates.  
 
We use StartCom's StartSSL for our certificates.  
   −
# Generate a key and a CSR: (we use <code>-batch</code> because StartSSL ignores everything but the public key in the CSR)<br/><code>openssl genrsa -out secret.key 2048<br/>openssl req -batch -new -key secret.key -out request.csr</code>
+
# Generate a key and a CSR: (we use <code>-batch</code> because StartSSL ignores everything but the public key in the CSR)<br/><code>openssl req -batch -new -keyout CNAME.sugarlabs.org.key -out CNAME.sugarlabs.org.csr</code>
 
# Log into the [https://startssl.com/ StartSSL control panel].  
 
# Log into the [https://startssl.com/ StartSSL control panel].  
 
# If you need to reconfirm access to the Sugar Labs domain (which is required every 30 days), do the following:
 
# If you need to reconfirm access to the Sugar Labs domain (which is required every 30 days), do the following:
Line 16: Line 16:     
Your certificate will either be granted instantly, or sometime over the next three hours. You'll get an email notification when that happens, and will be able to retrieve the certificate from *Tool box > Retrieve Certificate*.
 
Your certificate will either be granted instantly, or sometime over the next three hours. You'll get an email notification when that happens, and will be able to retrieve the certificate from *Tool box > Retrieve Certificate*.
 +
 +
Use the [https://www.ssllabs.com/ssldb/analyze.html?d=www.sugarlabs.org SSL validator] to verify the new certificate and web server configuration (NOTE: the validator doesn't seem to support SNI).
 +
 +
== Sites ==
 +
 +
* [[Service/chat|chat.sugarlabs.org]]
 +
* [[Service/git|git.sugarlabs.org]]
 +
* [[Service/cas|cas.sugarlabs.org]]
 +
* [[Service/obs|obs.sugarlabs.org]]
 +
* [[Service/obs|packages.sugarlabs.org]]
 +
* ''add sites you maintain''

Navigation menu